Privacy Policy
Implementation version 1 · 21 October 2026 · Marketing website only
What this website processes
We store your privacy preferences on your browser without a unique consent identifier. When you explicitly allow analytics, and no opt-out prevents it, this website can load Google Analytics 4, provided by Google. Google receives technical information such as your IP address, browser and device information, analytics cookie identifiers, and permitted usage events.
Application events are limited to visits to allowlisted public marketing pages and clicks on organiser, attendee, or platform links. URLs sent in these events exclude query strings and fragments. Page titles use fixed labels and the analytics referrer field is empty. We do not send form values, contact details, attendee data, authentication tokens, User-ID, or cross-domain identifiers.
Your choice comes first
Analytics scripts and measurement requests are blocked until valid opt-in consent. Rejecting optional cookies does not prevent you from using the site. Advertising consent stays denied. You can change your choice using Cookie settings in the footer. Withdrawing consent removes known local Google Analytics cookies and reloads the page to remove the loaded tracker. This does not delete information Google has already received.
Global Privacy Control and sale or sharing
We respect Global Privacy Control signals from your browser and request headers as a sale/sharing opt-out. Our conservative implementation also disables Google Analytics while that signal or your manual sale/sharing opt-out is active. This is separate from ordinary analytics consent, and Accept all cannot override GPC. Whether the actual Google configuration or data use constitutes sale or sharing requires owner and legal review; we make no unconfirmed claim that no sale or sharing occurs.
Providers, retention, and transfers
The intended marketing hosting provider is Vercel, with Cloudflare providing DNS, and Google providing optional analytics. Hosting access logs, contracts, recipients, controller/processor roles, locations, international transfer mechanisms and safeguards, and server log retention still need confirmation. Google account data retention and deletion processes also require review. Cookie expiry and Google-held data retention are different settings.
Rights and contact — release blocker
Depending on applicable law, rights may include access, correction, deletion, restriction, portability, withdrawal, objection, and opting out of sale or sharing, with applicable appeal and complaint routes. Before release, the owner must publish a verified privacy contact, request and identity-verification process, response timelines, and the relevant supervisory authority or regulator information. No contact address has been invented here.
Consent is the intended basis for optional analytics. The controller must confirm and document lawful bases for necessary storage, hosting and other processing, applicable notices, and jurisdiction-specific requirements. A cookie banner and technical tests do not establish complete GDPR, ePrivacy, CCPA, or CPRA compliance.