Privacy, in plain English

When you RSVP to a gathering: your name, and your email only if you give it. Your name is shown publicly on that gathering’s page — that is the entire point, so people know who’s coming.

When you request a room: your name, email, optional phone, and the details you type — occasion, date, time, headcount, notes.

When you list a room: your business name and location, the room details, and your contact information.

Automatically: basic server logs (IP address, page requested, timestamp, browser type) kept for security and debugging, deleted on a rolling 30-day basis.

In your own browser, not on our servers: after you join something we keep your first name — and your email if you asked for a room — in your browser’s local storage, so the next time it’s one tap instead of a form. That never leaves your device, it is not a tracking cookie, and clearing your browser data erases it. We do not use it to recognise you across devices, because we can’t.

Every private link we give you — your booking page, your RSVP page — has the controls on it. Take yourself off a guest list and the seat frees immediately. Reply to any message from us, or write to the address at the bottom of this page, and we will delete everything tied to you within 30 days and confirm when it’s done. We do not require an account to ask, because there are no accounts.

Hosts: ask and your listing comes down the same day, along with its request history.

To get your request to a host so they can answer you. To let a group see who’s coming. To send you the one confirmation email you asked for. To keep the service running and fight abuse. That is the complete list.

The host of the room sees your request and your contact details. That is the point of sending it.

Other people at the gathering see your first name and anything you chose to write in the note field. Nothing else — not your email, not your phone.

We do. A small team reads requests to help gatherings actually happen.

Service providers that run our hosting, database and email, strictly to provide those services to us. They may not use your data for their own purposes.

Nobody else. We will disclose information if legally compelled, and we will tell you unless we are legally barred from doing so.

We will never sell, rent or trade your personal information. We will not treat your data as an asset to be sold in an acquisition or bankruptcy — if Shindig is ever acquired, any buyer inherits this policy for data collected under it, and we will notify you before any change takes effect and give you a way to delete your data first.

We may eventually publish or license aggregate, de-identified insights: how many gatherings happened in a neighborhood, which nights are busiest, average group size, where demand for community space outruns supply. Cities, developers and researchers find that useful, and we think it may become part of how Shindig Place pays for itself.

The rules we hold ourselves to: no individual is ever identifiable; nothing is published from a set small enough to single someone out; no host’s performance is sold to their competitor; and this section is updated before we start, not after. If that ever changes, it changes here first.

Every RSVP gets a private link that lets you change or delete it yourself, with no explanation and no account. For anything else, email us and we will show you everything we hold, correct it, or delete it — no forms, no waiting period beyond a person reading your message.

Shindig is not for people under 16, and we do not knowingly collect their information.

Write to privacy@shindig.co. A person answers.