If you create an account or use account-based features, we may process:

• email address;
• username;
• password;
• account identifiers;
• profile information;
• account settings;
• signup consent information;
• authentication-related technical data.

Passwords are used for authentication and should be stored using appropriate security measures.

pinned.events may include public or social features. Depending on how you use the service, other users may be able to see information you choose to make public.

This may include:

• username;
• public profile details;
• event-related activity;
• public interactions;
• content you choose to share;
• information related to invitations, connections, or social discovery.

If you provide personal data about another person, you are responsible for making sure you have the right to do so.

pinned.events may use location-related data to show local events and relevant content.

Location data may come from:

• a city, venue, or address you enter manually;
• a place you select through a search field;
• browser or device geolocation, if you allow it;
• optional approximate location detection;
• IP-based approximate location, where enabled and allowed.

Location detection is not intended to be continuous unless clearly stated. In most cases, location is used when you request a location-based feature or choose to provide it.

When you use pinned.events, we may process technical data such as:

• IP address;
• browser type and version;
• device information;
• operating system;
• request metadata;
• timestamps;
• page views;
• clicks;
• usage patterns;
• error logs;
• security logs;
• cookies and similar technologies.

Some technical data is necessary to keep the service secure and working. Other technical or usage data is processed only when allowed by law or after you give consent.

We process data to make pinned.events available to you, including:

• displaying events and related content;
• managing accounts;
• supporting login and authentication;
• saving user settings;
• providing location-based discovery;
• enabling public and social features;
• handling user actions and service requests.

We process account and authentication data to:

• create accounts;
• verify login credentials;
• keep accounts secure;
• support direct signup;
• support Google OAuth signup or login, where available;
• prevent unauthorized access.

We process location-related data to:

• show nearby events;
• help users find events by city, venue, or area;
• support map-based or location-based features;
• improve relevance of event discovery.

Optional IP-based approximate location is controlled through the relevant consent category.

Browser or device geolocation is controlled by your browser or device settings.

We may use your email address to send:

• account-related messages;
• service-related notifications;
• security notices;
• transactional emails;
• optional updates or marketing communications, where applicable and allowed.

You can unsubscribe from optional marketing communications where required by law.

With your consent where required, we may process usage data to understand how pinned.events is used and how we can improve it.

This may include:

• product analytics;
• page views;
• clicks;
• feature usage;
• session replay;
• A/B testing;
• feature flags;
• performance measurement.

Optional measurement tools are off by default and are used only when the relevant consent is granted.

We process technical data to:

• keep pinned.events secure;
• detect abuse, spam, fraud, or misuse;
• prevent unauthorized access;
• debug errors;
• maintain service reliability;
• protect our rights and users.

We may process personal data when necessary to:

• comply with legal obligations;
• respond to lawful requests;
• establish, exercise, or defend legal claims;
• enforce our terms and policies;
• protect pinned.events, users, and third parties.

If you sign in with Google, Google may process data according to its own privacy policy.

pinned.events may receive account information needed to authenticate you, such as account identifiers or profile information made available through the OAuth flow.

We may use Amazon Simple Email Service to send emails.

We may use PostHog for analytics, session replay, feature flags, and A/B testing.

PostHog is used only after you give measurement consent.

PostHog may help us understand:

• page views;
• clicks;
• usage patterns;
• browser and device information;
• browsing behavior within pinned.events;
• product performance;
• feature usage.

Before measurement consent is granted, pinned.events should use deterministic fallback behavior for features that depend on optional tracking-backed feature flags.

We may use Google Maps to display maps or location-related content.

Google Maps content is loaded only after experience consent is granted.

If experience consent is not granted, pinned.events may show a placeholder instead of loading the map.

We may use Google Places to help users search for places, venues, or addresses.

These requests are made when you use venue or address search fields.

We use GeoNames for city and reverse-geocoding lookups needed for location-based event discovery.

If optional approximate location is enabled and configured, pinned.events may forward a limited IP lookup request from the server to the configured provider.

The specific provider depends on the deployment configuration. This lookup is used only after functionality consent.

We may use Cloudflare to improve performance, availability, and security.

Cloudflare may filter traffic between your browser and pinned.events.

We may use jsDelivr CDN to deliver technical assets and improve performance.

Uploaded media files are stored in S3-compatible object storage. Cloudflare R2 is the preferred storage provider, but another compatible provider may be used depending on deployment configuration.

We may use Ticketmaster Discovery API to fetch external event listings, classifications, related event dates, and ticketing links.

Ticketmaster data is used to display event information and may link you to Ticketmaster when you choose to view or buy tickets there.

The ChatGPT connector lets you connect your pinned.events account to ChatGPT through an OAuth/MCP flow if you explicitly choose to do so.

Event or series pages may include trailer embeds from YouTube or Vimeo when an event provides a supported trailer URL.

Necessary technologies are required to operate pinned.events and cannot be disabled through the cookie preferences panel.

They may be used for:

• authentication;
• session management;
• security;
• storing your cookie consent choice;
• remembering language or interface preferences selected by you;
• strictly required technical storage.

Functionality technologies are optional.

They may be used for:

• optional approximate location detection;
• remembering optional feed or location preferences;
• improving non-essential product behavior.

Experience technologies are optional.

They may be used for:

• maps;
• embedded media;
• external visual content;
• enhanced user experience features.

Measurement technologies are optional.

They may be used for:

• product analytics;
• session replay;
• feature testing;
• A/B testing;
• usage measurement;
• performance improvement.

localStorage allows pinned.events to store data in your browser without a fixed automatic expiration date.

sessionStorage allows pinned.events to store temporary data during a browsing session and is normally deleted when you close the browser tab.

We may use browser storage for things such as:

• consent preferences;
• interface preferences;
• non-sensitive app state;
• location or feed preferences, where enabled.

If you are located in the European Union or the European Economic Area, we process your personal data only when we have a valid legal basis.

Depending on the context, we may rely on:

• contract, when processing is necessary to provide pinned.events or features you request;
• consent, when processing is based on your permission, such as optional cookies, measurement, session replay, or external content;
• legal obligation, when processing is required by applicable law;
• legitimate interests, when processing is necessary for security, maintenance, abuse prevention, service reliability, legal claims, or similar purposes, provided your rights do not override those interests.

Where we rely on legitimate interests, you may have the right to object.

We keep personal data only for as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.

In general:

• account data is kept while your account remains active;
• data needed to provide the service is kept for as long as needed to provide that service;
• data processed based on consent is kept until consent is withdrawn or the data is no longer needed;
• data required for legal, tax, accounting, security, or dispute purposes may be kept for longer;
• technical logs may be kept for operation, maintenance, security, and troubleshooting.

When data is no longer needed, we delete it or anonymize it where possible.

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, disclosure, alteration, or destruction.

No online service can be guaranteed to be completely secure, but we take reasonable steps to protect the data we process.

Some providers used by pinned.events may process data outside your country, including outside the European Economic Area.

Where personal data is transferred internationally, we rely on appropriate safeguards where required by law. These may include:

• adequacy decisions;
• Standard Contractual Clauses;
• provider-specific transfer safeguards;
• other lawful transfer mechanisms.

You can contact us if you want more information about international transfers related to your data.

Where we rely on your consent, you can withdraw it at any time.

For cookie and tracking preferences, you can use:

• Your Privacy Choices
• Cookie Policy
• the cookie preferences panel available on pinned.events.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Where we process personal data based on legitimate interests, you may object to that processing based on your particular situation.

If your personal data is processed for direct marketing, you may object at any time without giving a reason.

After a valid objection to direct marketing, we will no longer process your personal data for that purpose.

If you believe that your privacy rights have been violated, you can contact us first at:

[email protected]

You also have the right to lodge a complaint with a competent data protection authority.

If you are in Spain, the competent authority is the Agencia Española de Protección de Datos (AEPD).

pinned.events is not intended for children below the age at which they can legally consent to the processing of their personal data under applicable law.

If we learn that we have collected personal data from a child without the required consent, we will take appropriate steps to delete it.

pinned.events may send push notifications if you enable them.

Push notifications may be used to provide updates, alerts, or other service-related information.

You can usually disable push notifications through your browser or device settings.

Disabling push notifications may limit some features.

For operation, security, maintenance, debugging, and troubleshooting, pinned.events and its service providers may collect system logs or technical data.

This may include:

• IP address;
• browser information;
• device information;
• request metadata;
• error logs;
• timestamps;
• security-related events.

This data is used to keep pinned.events secure, reliable, and functional.

We may use personal data when necessary to establish, exercise, or defend legal claims.

We may also process or disclose personal data when required by law, court order, public authority request, or legal process.

We may update this Privacy Policy from time to time.

When we make changes, we will update the “Last updated” date at the top of this page.

If changes materially affect processing based on consent, we will request new consent where required by law.

We recommend reviewing this page periodically.

Personal data means any information that identifies or can reasonably identify a natural person.

Usage data means information collected automatically through pinned.events or third-party services used by pinned.events, such as technical data, browser data, device data, page visits, interaction data, and request metadata.

User means any person who uses pinned.events.

Data controller means the person or organization that decides why and how personal data is processed.

Processor means a person or organization that processes personal data on behalf of the data controller.

Cookiesare small pieces of data stored in a user's browser.

Similar technologies include localStorage, sessionStorage, embedded scripts, identifiers, pixels, web beacons, SDKs, or other tools that store or access information on a device or help recognize usage patterns.

Service means the website and services provided through pinned.events.

For questions, requests, or concerns about this Privacy Policy, contact:

Email: [email protected]