Co nowego

Booking pages that follow the visitor's week and the organiser's colours more closely, a run of booking-flow fixes, and environment variables that now take precedence over the admin settings page. Internally, the booking theme system was restructured so new themes can be added without changing the existing ones. Bandit is also updated to address security advisory EEF-CVE-2026-105659.

• Self-hosters: a sign-in, registration or other admin setting fixed by an environment variable now overrides the admin settings page, which shows it greyed out
• The booking calendar starts the week on the visitor's first day, such as Sunday in the US or Monday in most of Europe
• Onboarding helps you choose a booking theme by asking which theme's story sounds like you
• A custom colour palette now carries through the booking page's focus rings, highlights and payment pages, instead of falling back to cyan
• A link to a specific date opens the booking calendar on that date's month, instead of the current month
• A single-choice question with many options on the booking page now keeps the booker's answer, instead of losing it
• A guest who declines a group booking now frees their seat for someone else
• The website has a new booking themes page that tells each theme's story, and the homepage helps you find yours chmura

Reminder emails for meetings added from the dashboard calendar, an earlier refusal for paid bookings a host can no longer take, and corrected documentation. The Decimal library is also updated to address security advisory EEF-CVE-2026-97853.

• Adding a meeting from the dashboard calendar now lets you choose its reminder emails, instead of sending none
• The booking page refuses a paid booking when the host's plan no longer includes payments, instead of failing at checkout
• The documentation and website now give accurate setup steps, webhook retry details and Docker upgrade instructions chmura

More control over how group booking pages and subscribed calendars behave, replies to booking emails that reach the right person, and invitee details anonymised two years after a meeting. Existing group meeting types stop showing the exact number of spots left on every time; turn on "Show the count for the last spots" in the meeting type's settings to bring it back when few remain.

• Group meeting types can hide how full each time is on the booking page, or show the exact count only for the last few spots
• A subscribed calendar, such as a holiday feed, can count every event as busy, blocking those times on the booking page and in your free/busy feed
• Replying to a booking email now reaches the organiser (or, for the organiser's copy, the attendee) instead of the address it was sent from
• Invitee names, emails and messages are anonymised two years after their meeting ends; the meetings themselves stay in your statistics
• Repeating Outlook events that start on the 29th, 30th or 31st are refused with an explanation, instead of landing on a different day in shorter months
• A notification that disappears on its own no longer closes the dialog you have open
• Calendar invites from free-plan accounts carry a "Scheduled with Tymeslot" line chmura

Group bookings arrive, availability can run past midnight, and the app is now available in Brazilian Portuguese. Also .ics import on the dashboard calendar, dark mode in emails, and many smaller fixes across the dashboard on phones. Self-hosters: back up before upgrading, and to undo the upgrade restore that backup rather than going back to the previous image, which cannot read group bookings or overnight hours.

• Meeting types can take group bookings: several people book the same time, up to a participant limit you set
• Group bookings are part of the Pro plan chmura
• Availability hours can run past midnight (22:00 to 02:00, say), and meeting types can last up to 24 hours
• Availability schedules have separate buffers before and after each meeting, in place of one buffer for both
• The dashboard calendar imports events from an .ics file, picked from the toolbar or dropped on the calendar
• Emails switch to a dark design in mail apps set to dark mode, such as Apple Mail
• The booking page, dashboard and emails are available in Brazilian Portuguese
• Booking links can fill in the booker's name and email, by adding #name=…&email=… to the link

Hosts can now save in-person venues and let bookers choose one. This release is also a broad privacy and security pass: uploaded photos lose their location data, stored links and secrets are encrypted, and logs and analytics keep far less about visitors. Also fixes for dashboard calendar edits, CalDAV events and time zones in Manitoba and the Northwest Territories.

• Hosts can save in-person venues on a new Locations page in the dashboard, and bookers pick one on the booking page
• Uploaded profile pictures and backgrounds no longer publish the photo's location, capture time or device, including files uploaded before updating
• Booking and sign-up pages load Google's reCAPTCHA only once a visitor starts filling in the form
• Bookings and sign-ups were refused while Google's reCAPTCHA service was down; they now go through
• Webhook URLs, custom meeting links, and poll, RSVP and free/busy links are now stored encrypted
• Guests' calendar invitations no longer include the booker's email address, message or booking-form answers
• The booking page no longer offers times an hour out in Manitoba and the Northwest Territories from 1 November 2026
• Self-hosted instances no longer contact data.iana.org at startup and every week to check for time zone updates

Tymeslot now speaks Polish, booking titles follow each reader's language, and booking pages and emails no longer load fonts from Google. Also fixes for iCloud and mailbox.org calendars, dashboard calendar edits, and embed links. Under the hood it now runs on Elixir 1.20.4 and Erlang 28.5, with no configuration changes.

• Booking pages, emails and the dashboard are now available in Polish
• The tymeslot.app website and subscription pages are now available in Polish chmura
• Booking titles in calendar events and emails were always in English; the host now sees them in their language and guests in theirs
• Booking pages no longer load their fonts from Google
• Rescheduling a booking now moves the event in an iCloud calendar, instead of leaving it at the old time
• Bookings in a mailbox.org calendar no longer list your mailbox.org login address as an extra attendee
• Edits in the dashboard calendar are still saved to your calendar when you close the calendar before they finish
• A booking page's embed link opened in its own browser tab no longer reloads over and over

Hosts can now add guests to existing bookings and to meetings made with quick add, and booking cards show their reminder emails. Also fixes for choosing a CalDAV calendar, video rooms on moved events, and reminders nobody asked for.

• Hosts can add guests to an existing booking from the bookings dashboard, and each guest gets an invitation email
• Quick add in the dashboard calendar can include a note to the guest and invite extra guests in a language you pick
• Booking cards in the dashboard list each reminder email and whether it has been sent
• Events created in the dashboard calendar on a CalDAV account are saved to the calendar you picked, not the default one
• Moving a dashboard calendar event to another calendar no longer deletes its video room
• Meetings made with quick add or confirmed from a poll no longer send a reminder their confirmation said was not scheduled
• Attendee reminder emails now read “Our meeting is in 30 minutes” instead of missing the “in”

Recurring events can now be edited, moved and deleted as a series from the dashboard calendar, attendee cancellation emails are fixed, and bookings are no longer exposed through the host's calendar. Self-hosted installs gain built-in error tracking with admin alerts.

• Changing a recurring event in the dashboard calendar asks whether it applies to this event, this and following events, or all events
• Deleting a recurring event from the dashboard calendar asks whether to remove only that event or the whole series
• A recurring event can be moved to another calendar from the dashboard calendar, taking the whole series with it
• Deleting an event and choosing to notify attendees now emails them a cancellation, where before nobody was emailed
• Deleting an event someone else organised no longer emails its organiser and guests a cancellation on your behalf
• Events in the host's calendar no longer carry the booking's cancel code, which anyone who could see them could use to cancel it
• Events deleted in Google Calendar now disappear from the dashboard calendar, instead of lingering until long after they ended
• For self-hosters: errors are now recorded and new ones emailed to admins, and ERROR_TRACKING_ENABLED=false switches this off

Fixes across calendar sync, languages and video rooms: large CalDAV calendars sync without exhausting memory, pages follow the browser's language, and leftover video rooms are cleaned up. Translation files are now split by area of the app, so translators work in smaller catalogues.

• Syncing a large CalDAV calendar, or one after a bulk import, no longer runs the server out of memory
• Pages now follow a change of browser language, instead of keeping the first language they detected
• Public booking pages no longer switch to the dashboard's fallback language after you visit the dashboard
• Deleting a meeting in your calendar app now also removes its Nextcloud Talk or Teams room, instead of leaving it behind
• A booking whose video link needed retrying no longer leaves spare rooms on the host's video account
• The dashboard calendar no longer offers a subscribed calendar as the place to save a new event, where saving failed
• Dialogs taller than the window now scroll, instead of hiding their title and buttons off-screen
• Quick Add's meeting with a guest sends one invitation, instead of a second bare one in English

Bookers can now choose where a meeting is held, sign-in and sign-up are hardened so they no longer reveal which email addresses have accounts, and Microsoft Teams bookings keep their join links.

• The booking page can let guests choose where to meet: in person, by phone, or on one of several video services
• Guests can switch to another meeting location when they reschedule, instead of cancelling and booking again
• Microsoft Teams bookings no longer confirm without a join link, or lose it when moved back and forth
• For self-hosters: admin alerts now warn when calendar connections start failing across many accounts
• The timezone picker adds France's overseas territories and finds cities typed without their accents

Three self-hostable video providers arrive, and rescheduling keeps everything the original booking had.

• kMeet, Jitsi Meet and Nextcloud Talk join the video providers
• Rescheduled bookings keep their meeting type, answers and video room
• Times the host has already booked are no longer offered
• Edits to synced CalDAV events save instead of reverting
• Email reaches SMTP relays that negotiate TLS 1.3

Guest reminders arrive, and rescheduled bookings now notify everyone and keep calendars in step, with fixes to CalDAV series and multi-day events.

• Guests are reminded about the meetings they were invited to
• Rescheduled bookings notify guests and hosts and keep calendars in step
• Editing one occurrence no longer changes the rest of a CalDAV series
• Multi-day and overnight events stay in sync on every agenda day
• Signup and booking limits say how long you need to wait

Time off arrives, events edited on the dashboard calendar keep everything attached to them, and self-hosted calendars and recurring events sync more faithfully.

• Time off closes the days you are away without touching a calendar
• Calendar events edited from the dashboard keep attendees, reminders and repeats
• Zoom meetings move when a booking is rescheduled
• Nextcloud and other CalDAV calendars connect with per-provider guidance
• Pro access continues while a failed payment is being retried chmura

Calendar reconnection and upgrade fixes: revoked Google and Outlook access now reaches owners, bookings avoid calendars awaiting reconnection, and interrupted upgrades repair their database indexes.

• Owners are asked to reconnect when Google or Outlook revokes calendar access
• Bookings go to a working calendar while the chosen one needs reconnecting
• Google Meet participants get the plain link, without Google's account chooser
• The Docker image now applies values set in /app/data/.env
• A time freed by a host's reschedule request can be booked again

Calendar health and privacy fixes: stalled Google, Outlook, Exchange and subscribed calendars now show as unhealthy, meeting links stay out of analytics, and .env values are no longer interpolated.

• Calendars that stop syncing now show as unhealthy and their owners are notified
• Owners are emailed whenever a calendar or video connection needs reconnecting
• Meeting links and query strings are scrubbed before reaching analytics
• The Link embed preview no longer makes real bookings and is marked as a test
• Telegram and Slack notifications show meeting times in the organiser's timezone

Email delivery and calendar fixes: mail survives slow or unreachable SMTP relays, owners are told when a calendar needs reconnecting, and deselected calendars stay out of search and reminders.

• Email is no longer silently dropped when the SMTP relay is slow or unreachable
• SMTP login is now optional, always used when set, and SMTP_SSL forces TLS
• Calendar owners are emailed when a calendar needs reconnecting
• Booking invites are no longer deferred by strict mail gateways
• Feature and comparison pages gain screenshots, cited sources and share images chmura

Fixes outbound HTTPS requests through a configured proxy and the host's avatar in Gmail booking emails; the dashboard calendar now opens on today in your own timezone, and deselected calendars no longer appear in the agenda.

CalDAV reliability fixes: connections recover properly, missing bookings restore, deleting two calendars at once no longer breaks, and booking previews no longer create real bookings or get blocked by the rate limit.

Calendar fixes: every changed Google Calendar event now syncs, CalDAV servers that require digest authentication can connect, and embed pages stay scrollable after reopening the booking popup.

Calendar fixes: CalDAV and Outlook now recognise Tymeslot's own bookings, a CalDAV calendar no longer silently syncs nothing, and calendar settings show the last sync time again.

Fixes two false-positive external-calendar warnings so hosts no longer see stale change alerts.

Hosts can require their approval before a booking is confirmed, write their own booking page welcome, and have bookings written back to Exchange.

• Require your approval before a booking on a meeting type is confirmed
• Write your own booking page heading, greeting and instruction
• Confirmed bookings are now written to a connected Exchange calendar
• Cloudron installs can be configured from a file instead of the CLI
• Visitors can pause the background video, with clearer labels throughout

Microsoft Exchange calendars can now be connected, and hosts gain finer control over booking times and admin settings.

• Connect a Microsoft Exchange calendar for free/busy and scheduled sync
• Set a custom booking interval instead of picking from a fixed list
• A two-tier hour picker keeps dense slot grids grouped and legible
• Admin settings are grouped into tabs, with a fallback language per surface
• Self-hosted SMTP relays now send mail reliably, with clearer TLS errors

Booking-page fixes: every free day is reachable, failures explain themselves, and video invitations reach the attendee.

• Every bookable day and month is reachable on the booking calendar
• A page that cannot load its times says so and asks the visitor to retry
• An ad-hoc meeting that books a video room now invites the attendee
• Slack notifications are sent when Telegram is connected as well
• CalDAV calendars connect to servers that answer 405 to discovery

Booking pages now open on a day visitors can actually book, and cancellation emails link back to the host.

• The booking calendar opens on the first free day with its times loaded
• Rescheduling lands on a bookable day instead of an empty month
• Webhook payloads now include the meeting's guests
• The cancellation email links back to the host's booking page

A reliability and security release: bookings fail safe, integrations survive provider outages, and sign-in events are audited.

• Bookings are refused for times the host's schedule never offered
• A video provider outage now trips a circuit breaker instead of retrying
• Booking emails wait out a mail outage instead of being dropped
• Account lockouts, password changes and social sign-ins are now audited
• Booking errors and the agenda countdown appear in the visitor's language

A reliability release for bookings that use a video meeting, calendar sync and profile photos.

• A booking with a video meeting is confirmed exactly once, however slowly the link arrives
• A Teams account that cannot host a meeting confirms the booking without a link
• CalDAV calendars are found on servers that answer under a subpath
• Choosing a second profile photo no longer takes the page down
• Email addresses on newer domain endings are accepted again

Video integrations can now reach a meeting server on your own private network.

• ALLOW_PRIVATE_IPS_FOR_VIDEO permits a meeting server on an internal network
• Custom video links and self-hosted MiroTalk both accept a private address

Meeting polls settle a group on a time by voting, and transactional emails can now carry your own branding.

• Propose several candidate times and let invitees vote to settle on one
• Confirming the winning time books the meeting with everyone invited
• Set your own logo, brand name and accent colour on transactional emails
• Email buttons and links now meet accessibility contrast requirements
• Nextcloud calendars now connect on installs served from a subdirectory

A security release covering the login redirect check and three dependency advisories.

• Login redirects reject crafted targets that a browser would resolve off-site
• Bundled dependencies updated to clear three security advisories

Availability is now built from named schedules, and every meeting type can follow its own.

• Keep up to five named schedules, each with its own hours, breaks and rules
• Every meeting type follows the schedule you give it, or your default schedule
• Buffer, minimum notice and the booking window now belong to a schedule
• Rate limiting no longer locks out signups or visitors behind a shared proxy
• Webhook deliveries stop retrying once the endpoint has rejected them outright
• Now built on the Cloudron 5.1 base image

The dashboard now opens on your calendar, and calendar connection problems stay visible until fixed.

• The dashboard opens on your calendar, with all navigation in the sidebar
• The Integrations badge names the integration that needs attention
• A broken calendar connection alerts once and stays flagged until you reconnect
• Fixed crashes when opening an event with a reminder or when a break is rejected

The meeting type editor moves to tabs, rescheduling notifies everyone again, and translations are corrected throughout.

• Edit a meeting type through five tabs instead of one long scrolling form
• Rescheduling now sends its own email and replaces the existing calendar entry
• Rescheduling a booking again fires webhooks, chat alerts and reminders
• Every translation reviewed and corrected across all five languages
• Pricing plan cards are translated, and long text no longer overflows chmura

Tymeslot now speaks six languages, and hosts can cap how many bookings they take.

• The whole app now speaks German, French, Italian, Ukrainian and Czech
• Cap how many bookings you accept per day, week or month
• Give each connected calendar its own colour, and show or hide it in the grid
• Disconnecting a video provider can now clean up its meeting rooms too
• The marketing site is localised, with prices in each market's own currency chmura

Calendar feed subscriptions and invoicing for paid bookings, with CalDAV sync and daylight-saving fixes.

• Subscribe to any published calendar feed by URL and have it block your availability
• Invoices are now issued automatically for paid meeting bookings
• Download your subscription invoices from the billing dashboard chmura
• CalDAV sync no longer stalls or drops events on stricter servers
• Booking times stay correct across daylight-saving and the 2026 clock changes

New email delivery providers alongside calendar sync, video link and email reliability fixes.

• Send email through SendGrid, Mailgun or AhaSend as well as SMTP and Postmark
• Read-only calendars are no longer offered as booking targets
• Organisers and guests now reliably receive video join links
• CalDAV sync recovers from emptied calendars and stricter servers
• A misconfigured email provider now fails at startup instead of silently dropping mail

External PostgreSQL support and a slim Docker image, faster page loads, and calendar sync and accessibility fixes.

• Connect to an external PostgreSQL with DATABASE_URL, including TLS
• A slim Docker image that runs PostgreSQL as its own container
• Faster page loads with zstd-compressed assets and lighter provider icons
• Calendar event updates use the provider's id, fixing Google sync failures
• Marketing and legal pages meet WCAG AA contrast chmura

Descriptions on meeting type cards, a Stripe API generation upgrade, a Connect onboarding fix, and security patches for six bundled dependencies.

• Descriptions now appear on meeting type cards
• Security patches for six bundled dependencies, including Phoenix and LiveView
• Stripe now runs on the 2025-11-17 API generation, no webhook changes needed
• Stripe Connect onboarding no longer blocked by the security policy
• Booking pages no longer fail on daylight-saving changeover days
• Renewed subscriptions are no longer cancelled prematurely chmura

Meeting reschedule and cancellation cleanup fixes, timezone display corrections, and Outlook calendar sync hardening.

A maintenance release with background job, build configuration and contribution tooling fixes.

A branded 404 page, an onboarding calendar fix, and security patches to bundled dependencies.

• A branded 404 page for unknown routes
• Security patches for bundled HTTP dependencies (plug, hpax, mint)

A unified integrations hub, calendar colour sync, and a live dashboard agenda, alongside encryption, security and accessibility hardening.

• Unified integrations hub for calendars, video and payments with health status and one-click reconnect
• Event colours now sync both ways with your calendar provider
• Data-at-rest encryption key can be rotated independently of deployment
• Live "Your day" agenda and setup nudges on the dashboard overview
• Improved keyboard and screen-reader accessibility across booking and dashboard

A fuller in-app calendar, Apple iCloud sync, and Tymeslot's move to open source under AGPLv3.

• Create recurring and all-day calendar events, with colours and reminders
• Quick-add, search, agenda view and keyboard shortcuts for the calendar
• Apple iCloud added as a calendar provider alongside Google, Outlook and CalDAV
• Live booking-page preview and theme picker moved into onboarding
• Relicensed under AGPLv3, so self-hosters can modify and redistribute Tymeslot

Personal free/busy feed, richer calendar events, and CalDAV improvements.

• Personal free/busy calendar feed for sharing availability externally
• Calendar events enriched with conference links, language tags and free/busy status
• SMTP now accepts wildcard TLS certificates

Session security hardening, stage-aware onboarding emails, and marketing page improvements.

• Sessions end immediately on logout or credential change
• Onboarding emails adapt to each user's activation stage chmura
• Structured data and performance improvements on marketing pages chmura

WordPress embed guidance, a public FAQ page, and stability fixes.

• Embed dashboard links WordPress users to the official plugin
• Public FAQ page covering common questions chmura
• Blocked embeds show a clear notice rather than the homepage

One-click Google Calendar connect in onboarding, plus small fixes.

• One-click Google Calendar connect during onboarding

A booking analytics dashboard with traffic sources, conversion and device breakdowns, plus a marketing blog and hardened security.

• Booking analytics dashboard with traffic sources, visits and conversion over time
• Cookie-less, bot-filtered analytics with UTM and tracking-parameter capture
• Booking analytics available on Pro chmura
• Marketing blog with featured posts, cover images and competitor comparison pages chmura
• Tighter content security policy and SSRF protection on calendar and video integrations

Guest attendees with email RSVP, richer booking-link sharing, and a new pricing page.

• Guest attendees with email RSVP on bookings, including a per-type guest limit
• Private and direct booking links for individual meeting types
• Booking-link share previews with organiser photo and details
• Features and Resources navigation menus with icons
• New pricing page chmura

Zoom and Google Meet calendar reliability fixes.

Paid bookings via Stripe Connect, custom booking questions, Zoom and Slack integrations, an admin control panel and a guided dashboard tour.

• Paid meeting types with Stripe Connect checkout, refunds and a payments dashboard
• Custom booking questions shown in emails, calendar events and confirmations
• Zoom and Slack integrations for video meetings and booking notifications
• Admin control panel for self-hosted installs with sign-in and security toggles
• Guided post-onboarding dashboard tour and what's-new announcements

Calendar sync and Cloudron boot reliability fixes.

Inline Google Meet links on Google Calendar events, plus calendar fixes.

• Google Meet links created inline with Google Calendar events

Booking title, calendar move and email-handling fixes.

Profession hub redesign and a CalDAV duplicate-invite fix.

Onboarding email funnel for new users plus booking calendar and calendar-sync fixes.

• Onboarding email funnel for newly verified users chmura

Founder welcome email with one-click unsubscribe and marketing opt-out controls.

• Founder welcome email with one-click unsubscribe chmura

Custom booking page colours, redaction-aware file logging, and calendar-sync fixes.

• Custom colour picker for booking page palettes and backgrounds
• Rotating file logs with sensitive-data redaction

Booking form localisation, email rendering, and CalDAV booking fixes.

Auto-pausing of unhealthy integrations, refined docs filtering, and updated legal policies.

• Auto-pause integrations stuck unhealthy past the configured cutoff
• Topic, provider and self-hosting filters for docs chmura
• Updated v1.1 Terms and Privacy Policy chmura

mailbox.org CalDAV support with guided provider setup and integration credential alerts.

• mailbox.org added as a CalDAV calendar provider
• Guided CalDAV setup with per-provider articles and in-form links
• Immediate alerts when integration credentials become invalid
• Load environment variables from a .env file at boot

Richer calendar views and resilient CalDAV reconnection and credential rotation.

• 3-day calendar view with swipe navigation and responsive view demotion
• CalDAV credential rotation without recreating the integration
• OAuth reconnect button on calendar integration cards
• Automatic reauth flagging when CalDAV sync hits 401

Reliability and security fixes across booking forms, billing webhooks and reschedule emails.

Italian language support plus extensive security and reliability hardening.

• Italian added to supported booking and email languages
• Stronger account lockout, open-redirect and webhook SSRF protections

Calendar sync reliability fixes and email translations.

• Dashboard warning when a calendar integration has no calendars selected
• User-facing emails translated into French, German and Ukrainian

Docker first-run, availability and request-isolation fixes.

Booking security hardening and calendar fixes.

• Closed access-control gaps on meeting cancel and reschedule

Subscription dashboard and calendar sync fixes.

• Subscription dashboard covers past-due and unpaid states with post-checkout polling chmura

Recurring-event availability and calendar audit fixes.

Version metadata fixes for release tooling.

Changelog, manifest and tooling fixes.

CalDAV reliability overhaul with offline write queue and conflict resolution.

• CalDAV offline write queue so calendar changes are retried when the server is unreachable
• CalDAV conflict resolution with conditional-write retries on transient errors
• Centralised attendee notifications with change detection and correct ICS sequencing
• Scheduling page availability refreshes automatically after calendar sync

Timezone handling and security hardening across booking and calendar sync.

• Robust timezone handling with quoted-TZID normalisation and DST-correct conversions
• Public booking page honours the configured meeting type order
• Mobile dashboard and auth page layout fixes

Redesigned 2026 emails, a canonical calendar event model and stronger CalDAV sync.

• Redesigned transactional and system emails for 2026
• Periodic forced full re-sync and event fingerprinting for CalDAV calendars
• Unified calendar event model normalising all providers
• Redesigned profession and category hub pages with improved SEO chmura
• Open Graph social card images for shared links

Multi-attendee meetings, calendar invitations and a redesigned onboarding flow.

• Multi-attendee calendar events with invitation emails and attendee management
• Ad-hoc meeting invitations created from the dashboard calendar
• Attendees notified when the organiser updates event details
• Redesigned split-screen onboarding with step-by-step scheduling setup
• Stricter domain and email validation with typo suggestions

A calendar grid with inline event editing and a hardened sync engine.

• Calendar grid with inline title editing and event management
• Calendar event sync engine with batch webhooks and async operations
• Scheduling and calendar mode tab bar in the dashboard
• Optional profile timezone

Multi-account integration support with curated timezone handling.

• Connect multiple accounts per integration with per-account uniqueness
• Email location labels translated per recipient's locale
• Improved timezone picker with popular-first ordering

Cloudron deployment, meeting-type and availability hardening fixes.

• Pozostałe poprawki błędów i większa stabilność.

Embed system split into inline and modal modes, responsive video backgrounds, and many profession landing pages.

• Inline and modal embed modes for the booking widget
• Responsive video transcoding for uploaded backgrounds
• Availability now spans the full 42-day calendar display range
• New profession landing pages with free-plan pricing and FAQs chmura

Profession landing pages and a redesigned site footer with extra link columns.

• 27 profession landing pages at /for/:slug chmura
• Redesigned footer with extra link columns
• Signed parent-origin verification for embedded booking pages

Free/busy calendar transparency, availability overrides and hardened iframe embed security.

• Respect calendar event transparency (free/busy) across all providers
• Availability overrides applied to business-hours calculation
• Hardened iframe embed security with wildcard domains and www auto-matching
• Config-driven dashboard extension system
• Plain-text bodies added to all email templates chmura

Session-free WebSocket for cross-origin embeds and smoother Cloudron install.

• Session-free WebSocket for cross-origin embed iframes
• Auto-generated secret key on first Cloudron install

Signed token authentication for embedded booking pages.

• Signed token auth for embeds, replacing cookie rewriting

Booking and auth form validation now surface errors per field on blur.

• Per-field booking validation errors shown on touched fields
• Debounced email validation on auth forms

New features reference page, JSON-LD docs markup and release workflow tooling.

• Features page with full feature reference chmura

Internal release tooling to sync version tags to the Core mirror.

Embedded-iframe booking improvements for cross-site scheduling.

• Embedded scheduling works cross-site with correct theme background and layout
• Version number shown in the site footer

A small Docker build-script fix.

Cloudron OIDC and sendmail addons are now auto-detected at startup.

• Automatic detection of Cloudron OIDC and sendmail addons

Calendar integration password handling fixes.

Booking pages can be embedded in any website, with a new weekly calendar view.

• Embed your booking page in any website via iframe
• Weekly calendar view for scheduling

Telegram booking notifications and confirmation-page fixes.

• Telegram notifications for bookings, with a guided connection wizard
• Cancellation and reschedule emails sent in the attendee's language

A public changelog page plus footer links to changelog and docs.

• Public changelog page with full release history chmura
• Google Meet links created automatically for bookings

Hardened OAuth/SSO sign-in security and an option to disable password auth.

• Option to disable password-based sign-in
• Hardened OAuth single sign-on security and validation

Generic OAuth/OIDC single sign-on and localised meeting cancel/reschedule pages.

• Sign in with any OAuth/OIDC provider for single sign-on
• Localised meeting cancel, reschedule and confirmation pages

Calendar OAuth scope tightening and docs navigation polish.

• Requests only the calendar events OAuth scope instead of broad calendar access

Documentation expansion and registration gating.

• Expanded documentation with new articles, author profiles, tag filtering and search chmura
• Feature flag to enable or disable user registration
• Embeddable booking widget script

Calendar and meeting settings UI fixes.

• Inactive calendar integrations now shown in meeting settings with fixed links

Onboarding timezone persistence and test setup fixes.

• Browser-detected timezone now saved during onboarding

Subscription reliability, billing data retention and cascade-delete fixes.

• Stripe event payloads retained for 30 days then automatically removed chmura
• More accurate trial subscription handling chmura

Structured logging infrastructure and logging hygiene.

Booking duration and video OAuth fixes.

• Meeting duration now correctly preserved throughout the booking flow

Per-attendee email localisation, CalDAV improvements and a broad mobile UI overhaul.

• Per-attendee locale for emails, with plain-text fallbacks for all templates
• Improved CalDAV discovery and Zimbra support
• Mobile timeline view for the availability grid
• Video integration editing with URLs shown in the list
• Wide-ranging mobile layout improvements across dashboard settings

CalDAV, Zimbra calendar support and deployment fixes.

• Zimbra calendar provider support

A small login page fix.

Docker and Railway deployment build fixes.

Integration health monitoring and onboarding email improvements, with many fixes.

• Integration health tracking that notifies users when calendar or video connections keep failing
• Onboarding email funnel with verification reminders and a founder welcome chmura
• Page titles and meta descriptions on authentication pages
• Clearer error when Microsoft sign-in needs admin consent
• Railway deployment support via Nixpacks

Security hardening across booking spam protection, rate limiting and structured logging.

• Booking form spam protection with honeypot and reCAPTCHA v3
• Rate limiting across dashboard write operations, theme and meeting actions
• Zimbra calendar provider with SSRF protection
• Structured JSON logging

Booking theme contrast and layout fixes, plus an icon XSS hardening.

Zimbra calendar support and HTTP proxy configuration.

• Zimbra calendar provider support
• HTTP proxy configuration support

French translation support and custom video provider improvements, with extensive fixes.

• Complete French translation
• Custom video provider with template variables in meeting URLs
• Configurable listen IP for self-hosted deployments
• Improved CalDAV server detection and authentication

• Rewrite author email to GitHub no-reply for tymeslot-core sync chmura
• Pozostałe poprawki błędów i większa stabilność.

Paid plans, privacy-friendly analytics, and hardened embedding.

• Feature gating for subscription tiers — automations locked behind paid plans chmura
• Analytics integration with Umami
• SEO metadata and sitemap for the marketing site chmura
• Secure-by-default embedding with an inline dashboard preview
• Video room recovery with automatic retry logic
• External database support for Docker deployments
• Comprehensive SMTP configuration with startup validation

Stripe billing and full subscription management.

• Stripe subscription management with trial support chmura
• Billing portal and full subscription status dashboard chmura
• Automated Stripe webhook handling for disputes, refunds, and trial lifecycle events chmura
• Drag-and-drop ordering of meeting types
• Branded "Powered by Tymeslot" footer on scheduling pages chmura

Smarter availability and richer meeting types.

• Duration-aware availability gap logic with high-performance ETS caching
• Microsoft Outlook availability hardening and Teams meeting creation on booking
• Multiple configurable reminders per meeting type
• Slug-based meeting type URLs

A full dashboard redesign and embeddable booking.

• Complete dashboard and UI redesign with a modern token-based design system
• Booking widget embedding for any website, with per-domain security controls
• Booking page internationalisation and localisation for international guests
• Pluggable calendar architecture with fault-tolerant background sync workers
• Unified webhook notifications dashboard with delivery resilience and retry logic
• Redesigned transactional email templates
• Session and OAuth security hardening

The first Tymeslot release.

• Customisable meeting types with availability rules, buffer times, and daily booking limits
• Google Calendar and Microsoft Outlook integration — availability synced automatically
• Booking confirmation and reminder emails
• OAuth and password-based authentication

Internal pre-push hook and core-sync tooling fixes.

All-day recurring event handling and standalone build fixes.

Calendar data backfill and test-isolation fixes.

Type-spec corrections and security and test reliability fixes.

A Google Calendar OAuth scope and discovery crash fix.