Privacy and data retention policy

What we store

Account: your name, email address, password (only as a hash), interface language, sign-in methods and active sessions with their IP address and browser.

Profile: public username, name, profile type, description, Instagram username, city, optional district, photo and cover.

Activity: dance styles with role and level, events you organise or attend, posts and media you upload, subscriptions, notifications, messages, reports you send and the consents you gave.

Why we use it

To run the service you asked for: your account, your public profile, events, RSVPs, posts, chat and notifications; to keep the community safe through moderation and rate limits; and to send service emails such as confirmation, password reset and sign-in links. We do not sell personal data and do not use it for advertising.

What others can see

Your public profile shows your name, username, profile type, description, Instagram username, city and district, dance styles, photo, published posts and the events you organise. Your email address is never shown.

Location

Exact coordinates of a person are never published. Profiles and partner search show only the city and district; distances are calculated on the server.

Partner search

You appear in partner search only for the styles where you ticked “looking for a partner” yourself. It is never switched on automatically, and you can switch it off at any time in your profile.

Who receives data

Our hosting and email delivery providers process data on our behalf. If you sign in with Google, Google, Microsoft or Apple tells us your name, email address and profile picture when available. Instagram posts you embed are loaded from Instagram. We disclose data to authorities only when the law requires it.

How long we keep it

Account and profile data are kept until you delete your account. Deleting it removes your profile, dance styles, RSVPs, posts, uploaded media, subscriptions, consents, notifications and messages immediately.

Sessions expire after 7 days without use; one-time links expire within minutes to hours.

Encrypted database backups are kept for 30 days and then erased, so deleted data disappears from backups within 30 days.

Moderation decisions may be kept without a link to you to protect the community. The consent log is kept for as long as the account exists.

Your rights

You can read and correct your data in your profile, download all of it as a JSON file and delete your account yourself under “Account & privacy”. You can also ask us to restrict or object to processing, and you may complain to your data protection authority.

Minimum age

The platform is for people aged 16 or older. You confirm this when you register, and the confirmation is recorded in the consent log.

Cookies

We use only the cookies needed to keep you signed in and to protect sign-in. There are no advertising or tracking cookies.

Changes to this policy

When this policy changes, its version changes too. The version you accepted is stored with your consent.

Contact

Questions and requests about your data: privacy@dance.local.