Privacy Policy

Last updated: October 7, 2026

Short version: We only store what's needed to sync your Buffer posts to your calendar. We never sell your data, never show ads, and you can delete everything anytime.

What We Collect

When you connect your Buffer account, we store:

Your Buffer user ID and email address
Your Buffer OAuth access token (to fetch your scheduled posts)
Your scheduled post content, channels, and times (cached for 24 hours)
A session cookie to keep you logged in

What We Don't Do

We don't sell your data
We don't show ads or use analytics trackers
We don't share your information with third parties
We don't access your Buffer account after you disconnect
We don't store your posts longer than 24 hours (cache expiry)

How It Works

Buffer2iCal fetches your scheduled posts from Buffer's API every 5 minutes. This data is temporarily cached in Cloudflare's KV storage (located in EU/US data centers) so your calendar app can quickly download it. Cached data automatically expires after 24 hours.

Your Control

You can delete your account and all associated data at any time from your dashboard. This immediately removes:

Your Buffer access token
All cached post content
Your user profile
All session data

Data Security

All data is transmitted over HTTPS. Your Buffer access token is stored securely and never exposed in URLs or logs. The iCal feed URL contains a unique identifier that acts as a secret—anyone with this link can view your scheduled posts, so keep it private.

Third-Party Services

We use two external services:

Buffer - to fetch your scheduled posts (subject to Buffer's Privacy Policy)
Cloudflare - to host this service and store cached data (subject to Cloudflare's Privacy Policy)

Open Source

This service is free and open source. You can inspect the code, self-host it, or contribute improvements.

Contact

Questions or concerns? Reach out at @danielmorrisey.com on Bluesky.

← Back to Buffer2iCal