Privacy
Last updated 20 August 2026
Past Forward reads dated public events and works out what they open. It needs very little about you to do that, and this page says exactly what it holds. If something here stops matching what the software does, the page is wrong and we want to know.
What we collect
- Your email address, if you put it in the signup box, create an account, or ask to be told when a country analysis is ready.
- What Google tells us, only if you choose to sign in with Google: your email address, your name and a link to your profile picture. We do not ask Google for anything else and we cannot see your Google password.
- Whether your account is free or paid. That is the whole of your account. There is no profile, no preferences and no name field.
- Which event and country you asked for, if you request a country level analysis, so we can produce it and tell you when it is done.
- Ordinary server logs kept by our host, which include your IP address, your browser's user agent and which page you asked for. We do not read these except to fix something that is broken.
What we do not do
- No analytics. There is no Google Analytics, no product analytics and no tracking pixel. The site loads no scripts from anyone else.
- No cookies. Not one, not even our own. If you sign in we keep a sign-in token in your browser's local storage, which is what stops you having to sign in on every page. Signing out removes it.
- No advertising, and no selling or renting your address to anybody.
- No profiling. We do not build a picture of you from what you read.
The subscriber list cannot be read from a browser. The key that sits in this website's source code can add an address and can never read one back. That is enforced by the database, not by our good intentions, and a test fails our build if an anonymous read ever starts working.
Where it is kept
- Supabase holds the database and runs sign-in. Our project is in their Frankfurt region, so the data sits in the European Union.
- Vercel hosts the site and keeps the server logs described above. Vercel is a United States company and serves the site from servers around the world.
- Google is involved only if you choose to sign in with Google, and only for that sign-in.
How long we keep it
- Your email on the mailing list: until you unsubscribe or ask us to remove it.
- Your account: until you ask us to delete it. Deleting the account deletes whether it was free or paid at the same time.
- Server logs: for as long as our host keeps them, which is a short rolling window and not something we control.
What you can ask for
You can ask us to show you what we hold about you, correct it, delete it, or send it to you in a readable file. You can object to us holding it at all. Because we hold so little, these are usually quick.
Write to simonegiannatiempo1@gmail.com. We will answer within thirty days. If you are in the European Union and you think we have handled this badly, you can complain to your national data protection authority.
Changes
If this changes we will change the date at the top. This page is built from the same code that builds the rest of the site, so it moves when the software moves rather than being remembered separately.