Privacy notice

Data we keep

We store the stable Cloudflare Access identity link and verified sign-in email, your locale and categories, saved events, an optional notification address and delivery status, source suggestions, and your Plus experiment steps. A contact-email snapshot and consent time are stored only if you separately join the Plus waitlist. Catalogue events and the shared Culture Radar score are not personal account data.

Why we use it

Account identity is used to keep private data separated between users. Preferences and saved events provide the requested catalogue and calendar. Plus experiment steps measure demand at the stated planned price. The waitlist email is used only for the separate launch message you request; digest consent remains separate.

Infrastructure

Cloudflare provides Access authentication, Worker execution, D1 storage, R2 backups and Email Service delivery. If you consent, Mixpanel processes strictly allowlisted pseudonymous product events in its EU data region. The app does not sell data, use advertising trackers, autocapture, session replay or automatic geolocation.

Retention and deletion

Live account data is kept until you delete the account. The analytics choice and pseudonymous browser device identifier expire after 90 days; an analytics session restarts after 30 minutes of inactivity. Mixpanel's standard event retention is two years, while account deletion requests earlier removal of the linked analytics identity and events. Operational backups expire under the documented backup retention schedule.

Metrics and tracking

We keep aggregate D1 counts and, only after your permission and operator enablement, pseudonymous product events for page opens, filters, sign-in, saved event IDs, category changes and notification states. Events may contain a random device/session ID or an HMAC-derived account ID, language and allowlisted event properties. They never contain email, raw account ID, event title, full URL, IP address or authentication data. We do not track email opens or clicks.

Your choices

You can decline optional analytics, enable or disable it later in Settings, change catalogue preferences, disable the optional digest, leave the Plus waitlist, or permanently delete the account. Disabling analytics removes its browser identifiers; account deletion also queues deletion of linked Mixpanel data. Contact the operator if you need access, correction or help.

Optional product analytics

Allow optional usage and retention analytics for this account, including background notification events, for 90 days. Withdrawal stops future collection on all devices; it does not delete past data. The service works without analytics.

Control pseudonymous usage analytics on this browser. Your choice expires after 90 days.

Contact

Questions, corrections and privacy requests: culture.radar.alerts@gmail.com