Privacy Policy

Last updated: March 24, 2026

1. Information We Collect

We collect information you provide directly:

  • Account data: Name, email, password, username, avatar, location, bio
  • Event data: Events you create, attend, or bookmark
  • Group data: Groups you create or join
  • Messages: Event chat messages and announcements
  • Usage data: IP address, browser type, pages visited

2. How We Use Your Information

  • To provide and maintain the Service
  • To personalize your experience and recommendations
  • To send notifications about events and groups you follow
  • To detect and prevent fraud, abuse, and security issues
  • To improve the Service

3. Information Sharing

We do not sell your personal information. We share data only:

  • With other users as part of your public profile (name, avatar, groups)
  • With event organizers (your RSVP status and public profile)
  • When required by law or to protect our rights
  • With service providers who assist in operating the Service

4. Data Security

We use encryption for passwords (bcrypt), CSRF protection, rate limiting, and HTTPS to protect your data. However, no method of transmission over the internet is 100% secure.

5. Your Rights

You have the right to:

  • Access and update your personal information via Settings
  • Delete your account (Settings > Account > Delete Account)
  • Control your profile visibility (Settings > Privacy)
  • Block other users

6. Cookies

We use a small number of cookies strictly to run the site. We do not use advertising or cross-site tracking cookies.

  • Session cookie (PHPSESSID) — keeps you signed in. Expires when you log out or your session ends.
  • CSRF token cookie — protects forms against cross-site request forgery. Session-scoped.
  • Preference cookies — remember basic UI choices (e.g. theme). Optional.

You can clear or block cookies in your browser settings, but the site may not work correctly without the session and CSRF cookies.

7. Third-Party Services

We rely on a small number of service providers to operate the site (for example, hosting and transactional email). These providers only process data on our behalf and are not permitted to use it for their own purposes.

8. International Users

Our servers may be located outside your country. By using the Service you understand your data may be processed in other jurisdictions.

9. Startup Notice

Hangoutz is an early-stage startup. Our practices and this policy may evolve as the product grows. We'll post material changes here and update the date above.

10. Data Retention

We retain your data as long as your account is active. When you delete your account, your personal data is anonymized. Event and group records may be retained for platform integrity.

11. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect data from children.

12. Changes

We may update this policy and will notify users of significant changes.

13. Contact

For privacy questions, contact privacy@hangoutz.app.