Privacy Policy
Effective November 1, 2026
This policy explains what Things To Do (whattodo.community), run by Alexander Fields, collects and how it's used. It goes with our Terms of Service.
What we collect
- Your account: email address, password (stored only in scrambled, hashed form by our login provider), the date you accepted our terms, and your home zip code if you choose to save one.
- What you post: event details, addresses, links, and flyers. Listings are public; anyone can see them. Your email address is never shown on listings.
- Payments: Stripe handles your card. We receive a record of the purchase (what you bought, the amount, and a Stripe reference), not your card number.
- Abuse prevention: we keep a one-way scrambled (hashed) version of your IP address for a couple of days to limit spam, plus reports people send about listings.
- Server logs: our host keeps standard technical logs (such as IP address, browser, and pages requested) for security and troubleshooting.
Cookies
We use cookies only to keep you signed in. We don't use advertising or tracking cookies, and we don't sell or rent your information.
How we use it
To run the site: show and moderate listings, sign you in, process payments, send account emails (like confirmation and sign-in links), prevent abuse, and answer you when you contact us.
Services that help us run the site
- Supabase: database, logins, and flyer storage.
- Vercel: hosting.
- Stripe: payments.
- U.S. Census Bureau Geocoder: turns event addresses into map locations.
- OpenFreeMap: map images, loaded by your browser.
- Email provider: delivers account emails.
If you use “Add to calendar” or “Directions”, you go to Google, Microsoft, or Apple, and their privacy policies apply. We may also share information if the law requires it or to protect people from harm.
How long we keep it
We keep your account and listings while your account is open. Deleted listings are hidden right away, but we keep a record (and any reports about it) for moderation and fraud prevention. Payment records are kept as tax and accounting rules require.
Your choices
You can delete your listings at any time from My events. To see, correct, or delete your account information, email liftandthink@gmail.com from the address on your account.
Children
The site isn't meant for children under 13, and we don't knowingly collect their information.
Security
We use encrypted connections, access controls, and hashed passwords. No system is perfectly secure, so please use a unique password.
Changes
We'll update the effective date above when this policy changes, and tell account holders about significant changes.