Privacy information

This page is not a finalized privacy policy. The data controller, contact details, retention periods, and data-rights process require approval before public use.

Account data

The application uses an email address for authentication and stores an organizer display name and timezone. Passwords are managed through Supabase Auth.

Access boundaries

Organizer records are restricted by ownership. Platform administrator access uses a separately assigned role and requires multi-factor authentication.

Event and attendee data

Current features store event details and organizer contact information, invitations, final group RSVP responses and individual guest records including names, email addresses and phone numbers. Guest details are self-reported. Seating assignments, individual guest passes, attendance and raffle results are also recorded.

Photos, content and requests

Enabled modules store menu, timeline and registry content, private uploaded images, device identifiers used for upload limits, moderation decisions, service requests and kiosk assistance records. Photo uploads and live requests are limited to event hours.

Access and operational records

The system maintains restricted guest, staff and kiosk sessions, revocation records, audit logs and email queue and delivery-attempt metadata. Guest access is scoped to the relevant event or personal pass; private media and reports require authorized access.