🔒 A clear note about our little site

Privacy Policy

Effective 1 November 2026

This policy explains how the Charlotte & Luke website handles information when we use it. It is a personal shared website, operated by its site owner, Luke.

Please know: this website uses both private storage and a public GitHub repository. Some shared entries saved through the site may be readable by anyone on the internet. Please do not enter anything into the site that we need to keep confidential.

Information the site handles

Shared entries: notes, calendar events, quiet-day entries, memories, rules, profile data, and TikTok plans may be stored as files in the site's public GitHub repository. This means those saved files can be viewed by the public, and edits may remain in GitHub's version history.
Gallery photos: photo files are stored in a private Backblaze B2 bucket. The site stores photo details such as album, caption, uploader, and upload date. Signed photo links are temporary and are provided to signed-in users through the site.
Question Night, presence, bathroom check-ins, settings, and video list: these records are stored by the site's Cloudflare application services and are used to provide the shared features.
Sign-in: the site uses a sign-in name and session cookie to keep the shared areas available to signed-in users. It may keep a selected profile name and preferences in the browser's local storage.

YouTube uploads and Google

If we choose to upload a video, the browser asks us to authorize Google for YouTube upload and read access. The app uses that authorization to upload the video and confirm its YouTube details. We do not receive or store our Google password. The app does not store the temporary Google access token after the upload/verification request.

Videos uploaded through the site are set to Unlisted. They are not intended to appear in YouTube search, but anyone who has a video's link can watch or share it. YouTube processes and hosts the video under its own terms and privacy policy. We store the video ID and related display details in the app.

Google's access can be reviewed or removed from our Google Account security settings. Removing access prevents future authorized uploads until we authorize again.

Service providers and external content

The site is hosted and operated using Cloudflare. It uses Backblaze B2 for private gallery files and GitHub for source code and some shared records. YouTube/Google handles video uploads and playback. Spotify and TikTok links or embeds may connect to those services. Those providers process information under their own policies when we use their services.

How information is used and kept

Information is used to run the features we choose to use together. The site is not designed to sell personal information or show advertising. Records remain in their storage until they are removed through the site or by the site owner. Removing or editing a file in GitHub may not remove earlier copies from the repository's history. YouTube videos and B2 photos may also need to be deleted from their respective services separately.

Contact and changes

For a privacy question or a request about information on this site, contact the site owner using the support contact shown in the site's Google OAuth app information. This policy may be updated if the site's features or storage change; the effective date above will be updated when that happens.