Hang Later

Privacy policy

Last updated: September 22, 2026

What Hang Later accesses

Hang Later requests the minimum Google Calendar access needed to determine whether a member is busy. We use free/busy data and do not request or display event titles, descriptions, attendees, or locations. Calendar write access is requested separately when a confirmed plan is ready to add.

What Hang Later stores

We store group membership, preference selections, coarse location and travel radius, availability windows, approvals, booking status, and encrypted OAuth refresh tokens. Payment card details are handled by Stripe and are never stored by Hang Later.

How data is shared

Other group members can see whether the group is ready, shared preferences, proposed plans, and votes. They cannot see another member’s calendar events or individual busy blocks.

Local discovery

When you explore local places, Hang Later sends the group’s city and selected activity category to Google Maps Platform. It does not send member names, calendar data or payment information. Place results are displayed temporarily and are not saved to group memory. See Google’s privacy policy.

Product analytics

We use PostHog’s US service to understand page visits and planning steps. A random browser identifier stored locally and in a first-party cookie connects browser actions with server outcomes across visits; it is not a sign-in credential. We classify traffic sources without sending raw referrers or campaign text. Share links may include a random attribution code so we can measure whether an invite led to a join. Backend and Muse events use pseudonymous member/group identifiers and selected outcome data. Booking amounts are measured separately from test transactions and self-reported external bookings. We send only selected actions, counts and generic page routes, never names, emails, group titles, private links, calendar contents, form text, card details or payment credentials. Session replay is off. Like any direct web request, analytics requests reach PostHog from your network address; location enrichment is disabled. We respect Do Not Track and Global Privacy Control when provided. Browser opt-out is also honored for server requests from that browser; it does not carry automatically into an independent Muse session. You can turn analytics off for this browser below.

Retention and deletion

Unconfirmed groups have a 30-day planning expiration. Automated deletion is being added before public launch; until then, members can delete their data from the group at any time, and organizers can delete an unconfirmed group. Confirmed booking and payment records may be retained where required for disputes, fraud prevention, accounting, or law. Disconnecting Calendar removes the stored Google credential and cached availability.

Contact

Use the support address published in the Hang Later connector listing.