Privacy

The text you paste, or the photos you add, are sent to OpenAI to be read or translated. That is the part doing the reading, and it is the one place your content goes.

The model is OpenAI’s GPT-5: gpt-5-nano reads plain text, and gpt-5-mini reads anything with an image in it. Photos are downscaled in your browser first. The request carries your content and nothing else: no account, no name and no identifier for you, because XUsCalendar does not have one to send.

If you paste an Instagram link, our server fetches that public post, and its slides from Instagram’s own image servers, so they can be read. Your browser then loads the post’s image directly from Instagram to show it back to you, so Instagram sees that request from you.

Nothing. There is no account, no sign-in, no database, no event history and no record of anything you have created. Submissions are handled in memory and discarded when the request finishes.

Nothing you paste is written to a log. The server records only how many tokens a request used, which is a handful of numbers and a model name, so that running costs can be watched. Your words are not in it.

A few preferences in your browser’s local storage, learned from what you do:

They never leave your device, and clearing your browser data removes them. The event you are working on lives only in the open page. Reload and it is gone.

No analytics, no advertising, no third-party scripts, no cookies for tracking, no fingerprinting and no profile of you anywhere. The app is free and there is nothing to sell, because you are not the product.

Your IP address is held in memory for up to a minute to stop one person overwhelming the service, and is never written down. Our host, Vercel, also counts requests at its edge for the same reason.

If something here is unclear, or you think it is wrong, write to hello@xusall.com. XUsCalendar is part of the XUsAll family.