Privacy Policy — SpeedDate

1. Data we collect

We collect only the minimum necessary to run SpeedDate. Here's what we store:

Data	When collected	Purpose
Name	Registration	Display to event participants
Email address	Registration	Account access, event confirmations, reminders
Age	Registration	Age-appropriate event matching
IP address	Every request	Security, rate limiting, fraud prevention
Session cookie	Login	Keeping you logged in
Event participation	During events	Match calculation, statistics
Match ratings	Post-event	Showing mutual matches

We do not collect: phone numbers, social media profiles, location, payment card details (donations processed by PayPal), or any biometric data.

We do not use your data for advertising, profiling, or sale to third parties — ever.

All data is stored on servers within the EU. We use:

We share data only in these limited circumstances:

With event organizers — first name and participation status only, for events they host
With PayPal — when you make a donation (their Privacy Policy applies)
When legally required — in response to valid legal process

We never sell, rent, or trade personal data to any third party for marketing purposes.

We use only essential cookies. No tracking or advertising cookies.

Cookie	Purpose	Duration
`sd_sess`	Session authentication	7 days
`sd_cookie`	Cookie consent preference (localStorage)	Permanent (localStorage)

If you are in the EU/EEA, you have the following rights:

Right to access

Request a copy of all personal data we hold about you.

Right to rectification

Correct inaccurate or incomplete personal data.

Right to erasure

Request deletion of your account and all associated data.

Right to portability

Receive your data in a machine-readable format.

Right to object

Object to processing based on legitimate interests.

Right to restrict

Limit how we process your data in certain circumstances.

To exercise any of these rights, email privacy@speed-dating.org. We respond within 30 days.

Account data — retained while your account is active, deleted within 30 days of account deletion request
Event participation logs — anonymised after 12 months
Server logs (IP) — retained for 90 days for security purposes
Contact form messages — retained for 12 months then deleted

Data controller: SpeedDate
Email: privacy@speed-dating.org

If you believe we have mishandled your data, you have the right to lodge a complaint with your local data protection authority.