Privacy policy — how we collect and handle your data

What we collect

Account data— email address, a hashed password (we never store your password in clear text), display name, and the date you joined.
Saved events— the events you choose to save to your profile, so we can show them on your dashboard.
Operational logs— standard server logs (IP, timestamp, request URL, user agent) generated by our hosting provider, kept short-term for debugging and abuse prevention.
Page views— we count how many times each event page is loaded, in aggregate, so organizers can see interest in their listing. We do not associate views with individual accounts.

What we do not collect

No third-party advertising. Optional Google Analytics (GA4) may load when administrators configure a measurement ID — IP anonymization is enabled and we do not use advertising cookies.
No precise location tracking.
No social-graph or contact-list scraping.
No content from your browsing on other sites.

How we use it

To create and authenticate your account.
To send transactional email (verification, password reset, organizer notifications).
To show you the events you saved.
To detect and stop abuse, fraud, or violations of our content rules.
To produce aggregate statistics about the platform (no personal identifiers).

Cookies

We use a small number of cookies that are strictly necessary — a session cookie to keep you logged in, and a CSRF cookie that protects forms. When administrators configure Google Analytics (GA4), Google may set first-party analytics cookies (for example _ga) with IP anonymization enabled. We do not set marketing or third-party advertising cookies.

We share data only with vetted infrastructure providers we use to run the site (hosting, database, transactional email, error logging). They process data on our behalf under written agreements and may not use it for their own purposes. We do not sell data to anyone.

Your rights

Access — ask us for a copy of the data tied to your account.
Correction — update profile fields directly, or email us for anything else.
Deletion — ask us to delete your account and personal data; we comply within 30 days.
Export — ask for a machine-readable copy of your saved events list.

Security

Connections are encrypted with TLS. Passwords are hashed with bcrypt. Access to production databases is restricted to a short list of operators. We do our best, but no system is perfectly secure — if you spot an issue, please reach out via the contact page.

Children

speeddates.com is not directed at people under 18. We do not knowingly collect data from minors. If you believe we have collected information from someone under 18, contact us and we will delete it.

Changes

If we make material changes to this policy, we will notify registered users by email and post the updated version here with a new revision date.