This Privacy Policy explains how the DatePop add-in for Microsoft Excel ("the Add-in"), published by Bosau Digital LLC ("we", "us", or "our"), which operates Python & VBA at pythonandvba.com, handles your data. It applies specifically to the Add-in. Our general website Privacy Policy, which also covers our website and its analytics, continues to apply to your use of our website.

1. In Short

• The Add-in reads and writes dates and builds calendars locally, inside Microsoft Excel on your own device.
• Your data never leaves Excel. We do not receive, process, store, or have any access to your workbook contents, such as the cells you select, the dates you pick, or the tables you build calendars from.
• Like any add-in, the Add-in loads its program code from addins.pythonandvba.com and Microsoft's office.js. When DatePop shows public holidays (a holiday country is set, or a date field or a calendar preview uses holidays), it also loads the public holiday file of that country from the same address as the Add-in. Beyond that, its only network requests concern a license key: checking it, and freeing a device when you remove it. They happen only when a license key is stored or entered. If you never enter a key, no license request is ever made.
• The Add-in contains no advertising, no cookies, no telemetry, and no third-party analytics or tracking.

2. Who We Are

The Add-in is published and operated by Bosau Digital LLC, the company behind Python & VBA (pythonandvba.com), founded by Sven Bosau. For any privacy-related questions, please contact us at contact@pythonandvba.com.

3. What Data the Add-in Processes

Your Spreadsheet Data

Everything the Add-in does (reading the cells you select, writing the dates you pick, filling a series, building a calendar sheet and reading a table of events) happens locally, inside Excel, on your device. The Add-in reads only the cells and tables you point it at. We do not receive, process, store, or have any access to your workbook contents.

The Add-in writes to your workbook only when you ask it to:

• Picking a date, Insert today and fill series write dates and their formats into the cells you selected. The previous contents of those cells are kept in memory for up to 10 minutes so Undo last date can restore them, and they are gone when the Add-in closes;
• Calendars (a month, a year at a glance, twelve months, a weekly planner and an events calendar) are added as new sheets, as ordinary cells you can edit;
• Date fields add a named range and, for the date range, Excel data validation to the cells you choose;
• Insert sample data adds a new sheet with a small sample table.

Data Stored Inside Your Workbook

When you use date fields or events calendars, the Add-in remembers their setup in the workbook's own document settings, so that they keep working and can be refreshed. Microsoft Office stores the following in the file:

• The definitions of your date fields and events calendars: their names, ranges, formats, rules and the column choices you made. It contains no cell values and never a license key;
• The named ranges the Add-in added for them.

This travels with your workbook like any other workbook content: anyone you send the file to receives it together with the cells themselves. It is never sent to us. Calendar sheets are ordinary sheets in your workbook and contain the values they show, by design.

Holiday Data

Public holidays are bundled with the Add-in as static data files. When DatePop shows public holidays, the Add-in loads that country's file from addins.pythonandvba.com, the same address that serves the Add-in itself. This happens when a holiday country is set in the settings, and also when a date field with a "No public holidays" rule or a preview of a Pro calendar uses holidays, which you can do in the free version too. The request carries no workbook data, and no holiday web service is called.

Calendar File Export (.ics)

With the Pro features you can export events as an .ics file. In Excel on the web the file is downloaded directly. On Windows and Mac, the Add-in opens a hand-off page in your browser, hosted at addins.pythonandvba.com, and passes the file text in the fragment of the page address, the part after the # sign. A browser does not send the fragment to a server, and the page makes no network request, so the hand-off page receives nothing and the file is created on your device. The page does not use analytics. A "Copy .ics text" option is available as an alternative.

License Validation Data

To confirm that you hold a valid license, the Add-in sends the following to our license server (api.pythonandvba.com) over an encrypted connection. It never sends any workbook content:

• Your license key;
• A random installation identifier generated on your device. It contains no name, email, or hardware information, but it is tied to your license, so it is not anonymous. It is used only to enforce the per-installation activation limit of your license;
• The Add-in version;
• A short platform label, such as "Excel for Windows" or "Excel on the web · Chrome", so the device list in your account is readable. It never contains a user name, a computer name or the full browser identification.

The check runs when the task pane opens and a license key is stored on the device, and when you add a key. When you remove a key, the Add-in sends the key and the installation identifier once more, so the device's slot is freed. If you never enter a license key, these requests are never made. A record of your last successful check is stored on your device so licensed features keep working for a short offline grace period (currently 7 days) if the license server cannot be reached, and then re-verifies once you are back online.

Like any web server, our license server also receives your IP address with each check. It appears in our server logs, which are deleted after 14 days (90 days for warnings and errors). The installation identifiers registered to your license are kept with your license record (when each was first seen and last used) for as long as the license exists. If a check fails, we keep the license key, IP address, approximate country, installation identifier and Add-in version for up to 90 days to detect misuse of keys.

Loading the Add-in

Like every Office add-in, the Add-in loads its program code when the task pane starts: the DatePop code from our server addins.pythonandvba.com, and Microsoft's standard add-in library (office.js) from Microsoft. These are ordinary web requests for code. They carry no workbook content, and we do not use them to track you.

Data Stored Locally on Your Device

The following are saved only in the Add-in's local storage on your device, which Office also mirrors to its add-in storage (under keys that start with dp.): your license key, the random installation identifier, the record of your last successful license check, and your settings, such as the language, the first day of the week, the date format, the holiday country and the theme. You can remove your license key in the Add-in at any time; the rest stays on your device until you remove the Add-in and clear its Office add-in storage.

Purchases

Licenses are bought on our own checkout at buy.pythonandvba.com (payments by Stripe or PayPal). Your license key is sent to you by email. We receive your name, email address, billing country, and order details from the checkout, and a VAT ID if you enter one. We never see your full card details. This is covered in more detail by our general website Privacy Policy.

Data Handled by Microsoft Excel

The Add-in runs inside Microsoft Excel on Windows, Mac and the web. Microsoft's handling of your Office documents and account data is governed by Microsoft's own privacy terms. See the Microsoft Privacy Statement.

4. Third-Party Services

• Microsoft Excel / Microsoft 365: the host application in which the Add-in runs, and the source of office.js.
• Our license server (api.pythonandvba.com, operated by us): checks license keys as described in Section 3.
• Stripe and PayPal: payment processing when you buy a license.

No other third parties receive any data through the Add-in. The public holiday data it bundles comes from the open-source date-holidays project (code under the ISC license, data under CC BY-SA 3.0). It is shipped with the Add-in, not requested from that project. We do not sell your personal data.

5. What the Add-in Does Not Do

• It does not include advertising, cookies, telemetry, or third-party analytics or tracking.
• It does not send your dates, your cells, your tables or your events to us or to anyone else, and it does not send them to an AI service.
• It does not send automatic error reports. Error messages are shown in the Add-in only; if you contact support, you can choose to copy the diagnostic details from the Add-in and include them yourself. Those details never contain cell contents.
• It does not call a holiday web service, and it does not change cells you did not select or ask it to fill.
• It does not access hardware identifiers, your contacts, Microsoft Graph, SharePoint, OneDrive, or files other than the workbook you have open.

6. How We Use Data

• To validate and manage your license and enforce its device limit.
• To show your devices in your account, so you can free a device yourself.
• To let licensed features keep working during a short offline grace period after a successful license check.
• To deliver your license key and handle purchases and support requests.

That is the complete list: the Add-in's date and calendar features themselves require no data to be sent to us.

7. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process the limited license and purchase data described above under the following legal bases:

• Contract performance: Verifying your license and delivering your purchase so we can provide the licensed features.
• Legitimate interests: Enforcing license limits and preventing misuse of our software.
• Legal obligation: Keeping purchase records as tax and accounting law requires.

8. International Data Transfers

Bosau Digital LLC and our license server are located in the United States or process data there. If you use the Add-in from outside the United States, the license validation data described above is transferred to the United States. Your workbook contents are never transferred, because they never leave your device. Where personal data of EEA or UK residents is transferred internationally, we and our service providers rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.

9. Data Retention

• License records: Retained for as long as necessary to support your license and comply with legal obligations.
• Server logs: Deleted after 14 days (90 days for warnings and errors).
• Failed license checks: Deleted after 90 days.
• Locally stored keys and settings: Remain on your device until you remove them or the Add-in.
• Date field and events calendar definitions stored in your workbook (names, ranges, rules and column choices): Remain in the file until you delete the file; they are under your control like the rest of the workbook.
• Worksheet contents: Not retained, received, or seen by us at all.

10. Your Rights

If you are located in the EEA or UK, you have the following rights under GDPR in respect of the personal data we hold (essentially, your license record and your purchase details):

• Access: Request a copy of the data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request that we limit how we use your data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, please contact us at contact@pythonandvba.com. We will respond within 30 days. Because your workbook data never reaches us, there is no workbook data of yours for us to return or delete.

You also have the right to lodge a complaint with your local data protection supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk); in the EEA you can find your national authority through the European Data Protection Board (edpb.europa.eu). We would welcome the chance to resolve your concern first, so please consider contacting us before you do.

11. Data Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. The Add-in's program code, its holiday data files and the license check are transmitted over encrypted (HTTPS) connections. Everything else stays on your device or in your workbook.

12. Children's Privacy

The Add-in is not directed at children under the age of 16. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the Add-in after changes are posted constitutes acceptance of the updated policy.

14. Contact

For any privacy-related questions or to exercise your rights, please contact:

Related documents: DatePop Terms of Use · Website Privacy Policy · Refund Policy · Terms & Conditions