Overlap

Privacy

Overlap is a small personal project. There are no accounts and no ads, and nothing is sold or shared. Here's everything it keeps.

What's stored

  • Group name and its invite link code.
  • Names you type in: yours or your party's, and the colour picked for it.
  • The days you tap as free: dates only, no times or locations.

That's it. No email, phone number, contacts, location or account (usage analytics are described below). Don't put anything in a name that you wouldn't want the group to see.

On your phone

Your browser remembers which groups you've opened and which member you are, so the link takes you straight to your calendar next time. It stays on your device; clearing your browser's site data removes it.

Who can see it

There are no passwords. A group is protected only by its invite link, which contains a long random code that can't realistically be guessed. Anyone who has the link can see the group's name, members and free days, and can change them.

Normally the only way to get a link is from someone already in the group. Groups can't be found any other way: there's no search or public list, and group pages are hidden from search engines. If a link ends up somewhere public (a group chat that gets forwarded, a social media post), anyone who sees it can open the group. If that happens, delete the group and start a new one.

The person who runs Overlap (just me, Eddie) can technically see the stored data in the database, and the usage analytics below. I only use them to fix problems and improve the app.

How long it's kept

Groups and availability are kept until they're removed. Removing a member deletes their days right away. Anyone in a group can delete the whole group (Invite → Delete this group), which permanently removes its name, members and every marked day for everyone.

Usage analytics

To find what's confusing or broken without anyone having to report it, Overlap uses PostHog to record anonymous usage: pages viewed, actions like creating a group or tapping a day, errors, and session recordings (a replay of taps and screens).

Recordings hide everything you type and every group and member name, and invite-link codes are removed before anything is sent. There's no account, email or name attached; PostHog sets a random ID in your browser to tie a visit together. Only I can see this data. Recordings are kept for 30 days and usage events for up to a year.

Behind the scenes

The app is hosted on Vercel and the data lives in Convex. Like any website, their servers keep short-lived technical logs (such as IP address and the page requested) under their own policies.

Questions

Last updated October 25, 2026 (usage analytics added).