What we collect. Your account (email, handle, and mobile number if you add one; we store no passwords), profile (display name, bio, city, time zone), everything you post, direct messages (stored and machine-scanned for prohibited content; no human reads them unless they are reported), check-ins in How's Your Edge (your own history is private; only aggregates for cities with 10+ check-ins are shown), hashed IP addresses for rate limiting and spam control, and basic analytics. If you opt in to texts we send occasional messages about shows, drops and site news to the number you gave; reply STOP to any of them to opt out, and we keep a record of when you opted in or out. Login codes by text are sent regardless of that choice, only when you ask for one.
Why. To run the Service, keep it safe, send the emails you asked for, process payments, and understand what gets used.
Who we share with. Supabase (database, auth, storage), Vercel (hosting), Stripe (payments; they see what Stripe needs), Resend (email), image and text moderation providers (AWS Rekognition, Sightengine or OpenAI, which receive the content being checked), and embedded third parties (YouTube, Spotify, Instagram, Amazon, Printful) that set their own cookies when you load their embeds. We do not sell personal data.
Retention. Content stays until you delete it or your account. DMs stay until deleted by a participant. Hashed IPs and logs are kept up to 90 days. Payment records are kept as the law requires.
Deletion. "Delete my account" in Settings anonymizes your posts, blanks your messages and removes your login. It is completed within 30 days, usually immediately. Backups roll off within 30 days.
Your rights. California residents (CCPA) may request access, deletion and the categories of data we hold, and we do not sell data. EU/UK residents (GDPR): our legal bases are contract (running the Service), legitimate interest (safety, analytics) and consent (marketing email, analytics cookies where required). You may access, correct, export (Settings: Export my data), delete, or object; contact us at [CONTACT ADDRESS] or /contact. Data is processed in the United States.
Children. The Service is for people 13 and older. We do not knowingly collect data from children under 13; if you believe we have, contact us and we will delete it.
Cookies. Essential cookies for login. Analytics only where allowed; in regions that require consent we ask first. We honor your browser's Do Not Track setting for analytics.
Contact. [OPERATOR NAME], [CONTACT ADDRESS].