Privacy policy

WhatsUpPhoenix lists things to do in Phoenix and the Valley. You can browse without an account. This page explains what we store when you use the site, why, and what you can do about it. We don't sell your information, show ads or use tracking or analytics services.

What we store

• Your account, if you make one: your name, your email address and your password (stored only as a one-way hash, so nobody can read it). If you sign in with Google, we get your name, email address and profile picture from Google instead of a password, and keep the sign-in tokens Google gives us, encrypted.
• The events you save, so you can find them again.
• Your sign-ins: each session keeps the IP address and browser it started from, to protect your account. A session ends when you sign out, or after 30 days.
• Attempts to sign in or sign up: counted for a short time by IP address and by a scrambled form of the email address, to slow down people trying to guess passwords or send unwanted emails.
• How often each event is viewed: one number per event per day, not linked to you. It decides what shows as popular.

Cookies

We only use cookies the site needs to work, never for advertising or tracking:

• a sign-in cookie, while you're signed in;
• a cookie that lasts a few minutes while you sign in with Google, to check the answer really comes from Google;
• a cookie that remembers which events you viewed today, so a view is counted once a day;
• a short-lived cookie (two hours at most) that remembers an event you tried to save before signing in.

Who helps us run the site

• Vercel hosts the site and Neon hosts the database, both in the United States. Like most hosts, they keep short-lived logs of requests, including IP addresses, to run and protect their services.
• Resend sends our emails.
• When you choose a password, we check it against passwords leaked in other breaches with Have I Been Pwned. Only the first five characters of a scrambled form of it leave our server, never the password.
• Google, only if you choose to sign in with Google.
• Your browser loads map pictures from OpenFreeMap and event photos from the event's organizer or ticket seller (such as Ticketmaster). Like any website, they see your IP address when they send them.

Links to buy tickets or visit a venue take you to other sites, with their own privacy policies.

Emails we send

Only the emails your account needs: confirming your address, resetting your password, and a note if someone tries to sign up with an address that already has an account. No newsletters or marketing.

Your choices

• You can delete your account at any time from your account page. That removes your account, your sign-ins and your saved events straight away. Copies in our database host's short-term backups disappear as those backups expire.
• To get a copy of what we hold about you, or to ask a question, email hello@example.com. We reply within 30 days.

Children

The site is not meant for children under 13, and we don't knowingly let them make accounts.

Changes

If this policy changes, we'll update it here and change the date at the top. For a change that matters, we'll also tell account holders by email.

Contact

Questions about your privacy: hello@example.com.