Privacy

whatsrenewing is run by someone in England. In data protection terms that’s the controller: the one answerable for everything on this page.

For anything about your data, email hello@whatsrenewing.com. It reaches a person, not a ticket queue.

Three groups, and nothing outside them.

Your account

• Your email address. We need it to send the reminders.
• A scrambled version of your password, never the password. It can’t be turned back into the original, which is also why we can’t tell you what it was.
• Your timezone, so a reminder for a Tuesday arrives on your Tuesday.
• Which of our emails you’ve switched off on your account page.
• If you sign in with Google: the identifier Google gives us for your account, plus the email address and profile picture link it sends with it. We ask Google for nothing else, and we never get your Google password.

What you’re tracking

• For each renewal: what it is, the category, who it’s with, what you pay and how often, the renewal date, an offer end date, the day of the month it leaves your account, any notice period, whether it auto-renews, and anything you type into notes.
• The price history that builds up as you tell us what happened each year. It’s what the figures on Your money are worked out from — every one of them comes from a price you entered.
• Which reminders we’ve sent you, and when.

Keeping the account safe

• Each attempt to sign in, sign up or reset a password: the email address used, and the IP address it came from. It’s how we stop someone sitting there guessing passwords, and it’s deleted after about a day.

What we never ask for

No card or bank details — there’s nothing to pay. No policy numbers, account numbers or National Insurance numbers; the add form has no field for them and the reminders don’t need them. Please keep them out of the notes field too.

• To do the thing you signed up for. Your account and your renewals. Without them there’s no reminder to send.
• To keep accounts secure. The sign-in records above. We have a legitimate interest in not letting people break into each other’s accounts, and a day of IP addresses is a proportionate way to do it.

We don’t send marketing emails. Reminders about your own renewals aren’t marketing — they’re the service you asked for. The quarterly subscriptions check-in is the same: it only lists what you put in yourself.

Four companies, each doing one job, none of them allowed to use your data for anything of their own.

• Neon hosts the database everything is stored in.
• Resend delivers our emails, so they handle your email address and whatever the email says — which includes the name of the thing that’s renewing.
• Vercel runs the site, so every request passes through their servers.
• Google, but only if you choose to sign in with Google. If you use an email address and password, Google isn’t involved at all.

That’s the list. No advertising network, no analytics company and no data broker gets any of it, and we don’t sell or swap it.

One cookie, set when you sign in, which is what keeps you signed in as you move between pages. Sign out and it goes.

There’s nothing else: no analytics cookie, no advertising cookie, nothing measuring what you look at. That’s also why there’s no cookie banner — a banner exists to ask permission, and there’s nothing here to ask about.

The typeface is served from this domain rather than someone else’s, so opening a page doesn’t tell a third party that you did.

• Your account and your renewals: until you ask us to delete them. We don’t expire accounts for being quiet — a renewal date two years out is the whole point.
• Sign-in records: about a day. They’re cleared out automatically.
• Email links: a confirmation link lasts 24 hours and a password reset link one hour. Both are stored scrambled, so a copy of our database wouldn’t let anyone use them, and both are thrown away once used.
• A renewal you delete stops being shown and stops being emailed about immediately. The row itself goes when the account does.

UK data protection law gives you these, and you don’t have to explain why you want them.

• A copy of everything we hold about you.
• A correction, if something’s wrong.
• Deletion of all of it. That removes the account and every renewal with it.
• Your data in a portable form, to take elsewhere.
• An objection to anything we do on the grounds of legitimate interest.

Email hello@whatsrenewing.com. We’ll deal with it within a month, there’s no form and there’s no charge. You can delete your account yourself from your account page, or email us and we’ll do it.

Tell us first and we’ll try to put it right. You don’t have to, and you can go straight to the Information Commissioner’s Office, the UK regulator, at ico.org.uk or 0303 123 1113.

whatsrenewing is for adults running a household, and you need to be 18 to have an account. We don’t knowingly store anything about children. If you think we have, email us and it’ll be deleted.

The date at the top changes with it. If a change actually affects you — a new company handling your data, a new reason for holding it — we’ll email you rather than quietly editing this page.