Privacy policy

EventPuffin is built to store as little about you as possible. You can take part in an event without an account, and we never ask for your phone number or contacts. We only ask for an email address if you send us feedback and want an answer. This page says what we do keep, why, who else sees it, and how to have it deleted.

Who is responsible

EventPuffin is run by Andri Óskarsson, a private person, who is the data controller for the information described here. Write to privacy@eventpuffin.com with any question or request about your data.

What we keep

When you take part in an event

• The name you give the event. You choose it, and it can differ from event to event.
• Your answers: your votes, your RSVP and the items you claim.
• A random identifier in a cookie, so the app knows which answers are yours when you come back. It says nothing about who you are.
• What organizers write: the event’s title, description, questions, times and places.

When you sign in

You sign in with an Atproto account, such as one on Bluesky or Eurosky. We never see your password: your account’s host signs you in and tells us who you are. We keep:

• Your account’s identifier (DID) and handle, which are public on the network.
• The address of your public profile picture, if you have one.
• Your language choice.
• The sign-in session your host gives us. It lets us publish an event to your account when you ask us to, and nothing else: we only ask your host for permission to identify you and to write calendar event records.

When you turn on notifications

Your browser gives us a push address and keys, so we can send you reminders and news about that event. Turn notifications off, or leave the event, and they are deleted.

When you look for events near you

If you share your device’s location to find public events, we round it to about a kilometre and keep it only with your session, never in our database.

When you send feedback

• Your message, and which kind of page you sent it from, such as an event’s settings. Never the page’s address, so never a link to your event.
• An email address, only if you give one so we can answer you. It is deleted as soon as we’ve answered, and after 90 days at most.

We don’t link feedback to your name or your account, and we don’t store your IP address with it.

What we never keep

Apart from an email address you choose to give with feedback, we don’t store email addresses, phone numbers, postal addresses, contact lists or payment details, and we don’t build profiles of you.

Public data on the Atproto network

When an organizer publishes an event, we write it as a public record in the organizer’s own Atproto repository, held by their account’s host. Anyone, including other apps, can read and copy it. Unpublishing deletes the record from the repository, but we can’t remove copies others have already made.

To show public events near you, EventPuffin also reads public event records from the network and keeps a copy of each until the event has ended.

Cookies and statistics

We only use cookies the app needs to work: they remember your answers, your sign-in and your language, and keep sign-in safe while it is in progress. There are no advertising or tracking cookies.

We count page visits with Umami, which runs on our own server. It sets no cookies and doesn’t store your IP address.

Server logs

Our servers log each request, including your IP address, the time, the page requested and your browser’s name. We keep these logs only as long as we need them to run the service and keep it secure, and then delete them.

Who else receives data

• OVHcloud, which hosts our servers in the EU.
• Your account’s host, for example Bluesky or Eurosky, when you sign in and when you publish an event.
• The PLC directory (plc.directory), which we ask to look up your account’s public identity.
• Bluesky’s public service, which we ask for your public profile picture. Your browser then loads the picture from Bluesky’s image service, which sees your IP address.
• OpenStreetMap: we send the place names organizers type to its Nominatim service to find them on the map, without saying who typed them. Your browser loads map images from OpenStreetMap, which sees your IP address.
• The email service we answer from, when we reply to feedback you left an address with.
• Your browser’s push service, for example from Google, Mozilla or Apple, which delivers notifications you have turned on.

Some of these services, such as Bluesky and the push services, may process data outside the EU. We don’t sell your data or share it for advertising.

Why we may use it

• To provide the service you ask for (GDPR article 6(1)(b)): your name, answers, sign-in and publishing.
• Your consent (article 6(1)(a)): notifications, location, and an email address you give with feedback. You can withdraw it at any time by turning them off, or by asking us to delete the address.
• Our legitimate interest in running a secure, working service (article 6(1)(f)): server logs, visit counts and the feedback you send.

How long we keep it

• An event’s data stays until the event’s owner deletes the event. That deletes every name, answer and notification for it.
• Your answers stay until you leave the event, which deletes your name, answers and notifications there.
• Your account data stays until you ask us to delete it.
• Copies of public events from the network stay until the event has ended.
• Feedback is deleted a year after you send it, or sooner if you ask. An email address you gave with it is deleted once we’ve answered, and after 90 days at most.
• Server logs stay only as long as running and securing the service needs.

Your rights

You have the right to see the data we hold about you, have it corrected or deleted, restrict or object to how we use it, and get a copy of it.

• Without an account, you can delete your own answers by leaving the event. We can’t confirm who you are without an account, so we can’t act on a request by email; ask the event’s organizer instead.
• With an account, write to privacy@eventpuffin.com and include your handle. We may ask you to confirm the account is yours, and we answer within one month.

If you think we handle your data wrongly, you can complain to the Danish Data Protection Agency, Datatilsynet.

Changes

When this policy changes, the date at the top changes too. A material change is also described at the top of the page for 30 days.