What we collect

Account data. When you create an account we store your email and an optional display name. Your password, if you use one, is stored only in scrambled (hashed) form.

Host profile. You can optionally add a photo and a name, shown as "Hosted by" on your events. Both are public, and both stay blank unless you fill them in. Anyone can see this, including search engines.

Event content. Events you post, including name, description, category, address, coordinates, times, links, and photos, are public by design so other people can discover them on the map. Anyone can see this, including search engines. When you upload a photo, your browser re-saves it before sending, which removes hidden data such as the camera's location.

Saves and attendance. Saving an event is private to you, and if you mark yourself as attending, anyone can see the total count but only the event's host can see who is going.

Location. If you grant location permission we use your device's coordinates in-browser to center the map and sort events by distance. If you tap "Use my current location" while posting an event, those coordinates are sent to Nominatim to look up an address for you. We do not store your location on our servers.

Reports. If you flag an event or photo, we store your user id, the reason, and a snapshot of the reported content at the time you flagged it, so we can review moderation actions. Reports are kept for as long as needed to enforce our rules and keep Sidevine safe.

Purchases. When you buy a boost or a recurring series, Stripe processes the payment and we keep a record of what you bought and when, tied to your event. We never see or store your card number. Stripe keeps its own payment records under its own privacy policy.

Operational logs. If a signup fails, we log the email address and keep it for 90 days to help diagnose the problem. Rate-limit records, used to stop abuse, include your IP address and are also kept for 90 days. Error logs in Vercel and Supabase may include an IP address or email address for as long as those services keep their logs. Like any website, our hosting and security providers receive your IP address and browser details when you visit.

Support emails. If you email support@sidevine.com, we receive your message and email address. Our domain provider, Cloudflare, forwards that mail to a Gmail inbox that we use for support.

How we use it

• Show approved events on the map and list.
• Let you manage events you posted.
• Verify your email before your events go live to reduce spam.
• Auto-hide events or photos that are reported multiple times.
• Send account and payment emails.
• Prevent abuse and keep Sidevine safe.
• We do not send marketing emails.

How we protect it

Data is stored with row-level security so users can only edit their own content. Photos are stored in a private bucket and served through short-lived signed URLs. Data is encrypted in transit (HTTPS). No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

Data retention

We keep your account and event data for as long as your account is active. Events you delete are removed immediately. Reports are kept for as long as needed to enforce our rules and keep Sidevine safe. After you delete something or your account, copies may remain for a limited time in backups, and in places we do not control, such as search engine caches or screenshots others took.

When you delete your account, we cancel any active recurring series first (if that ever fails, we finish it by hand). We then delete your profile, every event you posted, the purchase records tied to those events, and your uploaded photos. We keep reports you filed, with your name removed from them, and our own records of moderation actions. Stripe keeps its own payment records.

If we ban an account for breaking our rules, the account and its email stay on file, and the ban stops that account from signing in.

Your rights

You have the right to access, correct, export, or delete the personal data we hold about you. You can delete events yourself from the "Mine" tab, or delete your account entirely from Account settings, reachable from the "Mine" tab. You can also email us to request a copy of your data. We do not sell your personal information. We only share it with the service providers listed below, to run Sidevine.

We may ask you to confirm you own the account before we share or delete anything. We aim to respond within 30 days. If you disagree with how we handled a request, email support@sidevine.com and we will take another look.

Your choices

You can delete any event you posted from the "Mine" tab. You can delete your account entirely from Account settings. This permanently removes your profile, events, and photos.

When we share information

We share information with the service providers listed below, only to run Sidevine. We may also share it if the law requires, to respond to legal requests, or to protect the safety of people or Sidevine. If Sidevine is ever sold or merged, your information may transfer to the new owner, and we will update this policy. We do not sell personal information or share it for cross-context behavioral advertising. Information you post publicly is visible to everyone.

Where your information is stored

Sidevine is run from the United States, and our providers store your information in the United States. If you use Sidevine from another country, your information is processed in the United States.

Third parties

We use a small number of other companies to help run Sidevine. Here is what each one does.

Supabase stores our data and handles sign-in, accounts, and photo storage. Read Supabase's privacy policy.

Stripe handles payment for boosted and recurring event listings. Stripe sees your card details so that we never have to. We never see or store your card number ourselves. You pay on Stripe's own page, and Stripe handles what you enter there under its own privacy policy. Stripe may also use it for fraud prevention. Read Stripe's privacy policy.

Resend sends account and payment related emails on our behalf, so it sees your email address when we send you something. Read Resend's privacy policy.

Vercel hosts the Sidevine website. Read Vercel's privacy policy.

Mapbox provides the map tiles you see. Mapbox also automatically collects some basic, anonymous usage information every time the map loads, like a random id and simple timing data, so it can measure how its maps are being used. We do not send Mapbox your account details. Like any website you load, Mapbox also receives your IP address. Read Mapbox's privacy policy.

OpenStreetMap's Nominatim service turns addresses into map coordinates and back again. When you type an address while posting an event, or tap "Use my current location," that address or location is sent to Nominatim to find the match. Read the OpenStreetMap Foundation's privacy policy.

Google Fonts serves the font used on this site. Loading a font from Google sends your IP address to Google, the same as loading an image from any website would. Read Google's privacy policy.

Cloudflare Turnstile helps us tell real people apart from automated bots when you sign up or reset your password. It checks a few basic signals from your browser to do this. Cloudflare also provides our domain name and email forwarding. Read Cloudflare's privacy policy.

Google (Gmail) holds the support inbox described above. Read Google's privacy policy.

Cookies and local storage

Sidevine uses a small amount of storage in your browser to make the site work well.

Once you sign in, we set a cookie that keeps you signed in for up to 400 days between visits. We do not use this or any other cookie to track you around the web.

We also save a few small pieces of information directly in your own browser, not on our servers:

• Your last known map location, so the map can center quickly the next time you visit.
• A draft of any event you are in the middle of writing, so you do not lose it if you navigate away.
• A small setting for which example text was last shown on the post form.
• Mapbox's own anonymous usage id, mentioned above.

A couple of these clear themselves automatically when you close the tab, like whether you already dismissed a reminder banner or already saw the "draft restored" message.

Some of the companies listed above may set their own cookies or storage, which we do not control.

Do Not Track

Sidevine does not respond to Do Not Track signals. We do not track you across other sites.

Children

Sidevine is for people 18 and older. We don't intentionally collect information from anyone under 18. If you think someone under 18 has an account, email support@sidevine.com and we will remove it.

Changes to this policy

If we change this policy, we will update the date at the top. If the change is significant, we will post a notice on the site. For major changes we may also email you.

Contact

Questions or requests about your information? Email support@sidevine.com.