Privacy Policy

Who is responsible

TOUGE (touge.events) is the data controller for the information described here. For any privacy question or request, email hello@touge.events.

What we collect

• Account. Your email address and a password, handled by our authentication provider. We never see your password — it is stored only as a hash.
• Profile. Anything you choose to add: display name, handle, a general location you type yourself, avatar image, social links, your car, and your interests. All of it is optional except the name.
• Attendance. Which events you RSVP to or mark yourself interested in, your run group and ticket quantity, and a ticket reference code.
• Hosting.If you host, the events you publish and their details, plus your host profile, team members and any invitations you send (which include the invitee's email address).
• Things you send us. Event reports, bug reports and feature suggestions, including the page you were on and an email address if you give one.
• Basic usage. A view counter per event. It is a single number per event and is not tied to your account.

What we don't collect

• No advertising or analytics trackers. The site loads no third-party analytics, advertising or social tracking scripts of any kind.
• No stored location history.If you use “Near me”, your browser asks your permission and passes your approximate coordinates to the page so events can be sorted by distance. They are rounded to roughly 110 metres, are never written to our database, and are discarded when you leave the page. They do appear in the page address while you are using the feature, which means they may appear in ordinary server access logs and your own browser history.
• No payment details.Ticket sales currently happen on the host's own ticketing site. We never see or store card details.

Cookies

We use one category of cookie: the session cookie that keeps you signed in. It is strictly necessary for the service to work, which is why we ask you to accept nothing — the notice you may have seen is there to tell you, not to gate the site. We set no advertising, analytics or profiling cookies. If that ever changes, we will ask for your consent before setting them.

Who else processes your data

• Supabase — database, authentication and file storage.
• Vercel — hosting and content delivery.
• Mapbox — location search. When you type into a location field while creating an event, what you type is sent to Mapbox to return suggestions.

These providers act on our instructions and are not permitted to use your data for their own purposes.

Where your data is stored

Our database and file storage are currently hosted in the United States (AWS us-east-2, Ohio). If you are in the European Economic Area, this means your personal data is transferred outside the EEA. Those transfers rely on the safeguards our providers offer for international transfers, including the EU–US Data Privacy Framework and standard contractual clauses.

Why we are allowed to hold it

We process your account, profile and attendance data to provide the service you asked for — that is, to perform our contract with you. We process reports and feedback on the basis of our legitimate interest in keeping the platform safe and working. Where we rely on your consent, such as your device location, you can withdraw it at any time in your browser settings.

How long we keep it

Your account data is kept until you delete your account. Events and their attendance records are kept while the event is live and for a reasonable period afterwards so hosts and attendees keep their history. Reports and feedback are kept until they are resolved.

Your rights

If you are in the EEA or the UK you have the right to access, correct, export, restrict or object to our use of your data, and to have it erased.

You can exercise most of these yourself: your profile is editable at any time, and Settings → Delete account permanently removes your account and the personal data attached to it. For anything else, email hello@touge.events and we will respond within 30 days. You also have the right to complain to your local data protection authority — in Lithuania, the State Data Protection Inspectorate (VDAI).

What other people can see

Your display name, handle, avatar, and the public parts of your profile are visible to other users. If you host an event, your host profile and that event are public. Your email address is never shown publicly.

Children

TOUGE is not intended for children under 16. If you believe a child has given us personal data, contact us and we will remove it.

Changes

If we change this policy in a way that materially affects you, we will say so on the site rather than quietly updating the date at the top.