Privacy Policy

SignupWrangler · Last updated October 6, 2026

SignupWrangler is a free, invite-only, hobby project that provides online sign-up sheets for volunteer shifts and similar schedules, using a Google Sheet that you own as the place the information lives. SignupWrangler (“we”, “us”) is operated by Ben Teitelbaum. This policy explains what information the service at signupwrangler.com handles, why, and the choices you have. If anything here is unclear, write to ben@teitelbaum.us.

1. What we collect and why

Your Google account sign-in. When an organizer signs in with Google, we receive their email address and Google account identifier. We use them to recognize the organizer and to decide who may manage a signup. We do not request your name, photo, contacts, calendar, or email.

Permission to use your Google Sheet. When you connect or create a Sheet, Google gives our server an access token. We store the long-lived part of it (a “refresh token”) encrypted so the signup page can keep working without asking you to sign in each time. The permission we request (drive.file) is limited to files that SignupWrangler creates or that you explicitly select — it does not let us see your other files.

What is in your Sheet. To run your signups we read, and add to, the information in the Sheet you connected: your schedule (dates, events and shifts), your team list (names, email addresses and status), who has taken which shift, and a log of signups. We hold this in the server’s memory for a short time so pages load quickly. We do not keep a separate copy in a database; the Sheet remains the source of truth, and you can read, edit or delete anything in it yourself.

People who use a signup page. Someone signing up for a shift types their email address. We check it against your team list, then record their name, email address, the shift they chose, and the time of the signup in your Sheet. Their browser remembers the email address and name on that device (in the browser’s local storage) so they don’t have to retype it; they can clear this with the “not me” link or by clearing their browser data. We do not set advertising or tracking cookies for signup visitors.

Technical information. Like any website, our server necessarily receives each visitor’s IP address and the details of their request in order to deliver the page and protect the service from abuse. We do not keep routine access logs and do not use this information to identify or profile individuals. Organizer sign-in uses a session cookie that is strictly necessary for staying signed in. We may keep short-lived operational logs (for example, error messages) to keep the service running.

2. How we use information

Only to provide and secure the service: to show your signup page, record signups in your Sheet, let organizers manage their signup, and fix problems. We do not use your information for advertising, we do not build profiles, and we do not sell it or share it for others’ marketing. We do not read the contents of your Sheet except as needed to operate the service, to investigate a security or abuse problem, or if you ask us for support.

3. Who we share information with

• Google — your Sheet is stored by Google, and we use Google’s sign-in and Sheets services on your behalf.
• Our hosting provider (Amazon Web Services), which runs the server that SignupWrangler runs on.
• Authorities, only where the law requires it.

We do not share information with anyone else.

4. Google user data

SignupWrangler’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the signup features you see, we do not transfer it to others except as described above, we do not use it for advertising, and no person at SignupWrangler reads it except in the limited cases listed in section 2.

5. How long we keep information

• Your Sheet’s contents stay in your Sheet, under your control, for as long as you keep it. We keep only short-lived in-memory copies.
• Your connection token is kept until you disconnect SignupWrangler or ask us to delete it.
• Sign-in details (organizer email address, and which Sheet it manages) are kept while your signup exists, and deleted when you ask us to remove it.

6. Your choices

• Disconnect any time. Remove SignupWrangler’s access at myaccount.google.com/permissions. Our stored token then stops working.
• See, correct or delete your information. Email ben@teitelbaum.us and we will act on your request. Information in a Sheet can also be changed directly by that Sheet’s owner. If you signed up for someone else’s schedule, the organizer who owns that Sheet is the one who controls that information, and we will help route your request to them.
• Your local rights. Depending on where you live (for example under the GDPR or California law), you may have additional rights over your information. We will honor them.

7. Security

All traffic to SignupWrangler uses HTTPS. Access tokens are encrypted when stored, and the secrets that protect them are kept apart from the code. Access to the server is limited to its operator. No system is perfectly secure, but we take reasonable measures to protect what we hold.

8. The free, Google-only version

Sheets set up with the free version of SignupWrangler run entirely inside the organizer’s own Google account using Google Apps Script. In that case SignupWrangler’s servers do not receive or store the Sheet’s data, and Google’s terms and privacy policy govern it.

9. Children

SignupWrangler is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has provided information to us, please contact us and we will delete it.

10. Changes to this policy

If we change this policy in a meaningful way we will update the date above and, where we have an organizer’s email address, tell them.

11. Contact

Ben Teitelbaum · ben@teitelbaum.us