Party Pal — Privacy policy

What it collects

• Your account identity — When you sign in with Google, Firebase Authentication receives your email address, your name and your profile photo from Google, and issues an account ID. If you sign in with an email link instead, it receives only your email address.
• Your events and RSVPs — The events you save, the RSVP status attached to each, and any notes or preferences you set. These come from the event sites you already use, read with the session you are already signed in with.
• How the app is used — Google Analytics records which pages are opened and when, the kind of device and browser, and an approximate location worked out from your IP address. It sets cookies in your browser to recognize a returning visit. Your events, RSVPs, name and email are never sent to it.
• Nothing else — There is no advertising, no tracking pixels and no profiling. Your Partiful and Luma passwords and cookies are never sent here.

Analytics and your choices

Whether Google Analytics runs straight away depends on where you are, because the rules differ. In the EU and EEA, Quebec, Turkey, South Korea and China it runs only if you allow it. In the UK, Switzerland, the rest of Canada, Brazil and most other countries it runs, and a notice lets you opt out. In the US, Japan, Australia and South Africa it runs, and you can turn it off here. If your location can't be worked out, it waits for your yes.

To work out which rules apply, the app asks Party Pal's server which country and state or province your connection comes from. Cloudflare reads this from your IP address; nothing is stored.

Google Analytics is set up only to measure how Party Pal is used: Google signals and ad personalization are off, and Party Pal doesn't use it for advertising. Google keeps this data for 14 months.

You can change your choice at any time, from here or from the Privacy link at the bottom of the app. Turning analytics off stops it on that browser and deletes its cookies.

Your privacy choices

Where it is stored

Your events live in Google Firebase (Cloud Firestore), in a section of the database keyed to your account ID. The security rules allow that section to be read or written only by a request carrying your own signed-in account ID — no other signed-in person can reach it.

A shared, read-only catalogue of public event listings is also stored there. It contains no personal information and is the same for everyone.

Firebase is operated by Google and Cloudflare provides the service the extension posts to. Both hold this data on Party Pal's behalf as processors; neither is given it for their own purposes.

What is never done with it

Your data is not sold or rented, and it is not used for advertising. It is not combined with data from anywhere else to profile you. The only third parties involved are the services named in this policy, which handle it on Party Pal's behalf.

Your events and account are used for one thing: showing you your own schedule. Analytics is used only to understand and improve the app.

Other requests the page makes

Loading the app requests typefaces from Google Fonts and Fontshare, and one library from unpkg. Those requests carry none of your event data, though like any web request the service can see your IP address. Google Analytics, when it runs, is loaded from Google.

Removing your data

Deleting an event in the app removes it from your account. Signing out ends the session on that device.

To remove everything, ask for your account to be deleted and the whole section keyed to your account ID is removed, along with the sign-in record.

The extensions are covered separately

The Party Pal browser extensions have their own policies, because they behave differently: Party Pal Autofill makes no network requests at all, and Party Pal — Everything can send to this account, to a dashboard on your own computer, or to both.