Privacy Policy

From attendees (no account required)

• Anonymous analytics: page visits, device type, screen size, locale, and an anonymized fingerprint hash used to estimate unique visitors. We do not set tracking cookies.
• When you submit a form (RSVP, raffle entry, wall post, nomination, attendee report, volunteer application, vendor lead, coupon claim): the data you choose to share — typically name, email, phone, message text, and optional photo.
• Coarse IP address and user agent for spam control and abuse prevention.
• Push subscription (only if you opt in): your browser's push endpoint and keys, stored to deliver live event announcements.

From organizers and judges (account required)

• Name, email, password hash, and organization assignment.
• Editorial actions you take (post announcements, approve nominations, score awards, check in attendees, etc.) along with a timestamp and your user ID.

• To operate the events platform — render pages, deliver push notifications, send ticket confirmation emails, run raffles, validate QR check-ins.
• To let event organizers contact you (if you provided contact info via a form on their event page).
• To prevent spam and abuse via fingerprint + IP rate limits.
• To generate aggregated analytics for organizers (unique device counts, raffle entry counts, etc.) — never including your individual identity.

• Community Wall posts are visible to everyone on the event page.
• Vendor lead-capture forms share your data with the specific vendor whose booth you visited — they may follow up.
• RSVP, attendee reports, nominations, volunteer applications are visible only to the event's organizers.
• We do not sell or rent personal data to advertisers or third parties.

Data is stored on managed PostgreSQL and object storage hosted in the United States. Connections use TLS (HTTPS). Passwords are bcrypt-hashed. Backups are encrypted at rest.

We do not use advertising or cross-site tracking cookies on the events platform. The only browser storage we use:

• localStorage for remembering your name when you post repeatedly to a community wall.
• sessionStorage for organizer auth tokens after login.
• Service worker cache for PWA offline support — content only, no personal data.

• Opt out of push: disable notifications in your browser site settings, or tap the same toggle that enabled them.
• Delete your data: email privacy@todaytelugu.net with the event name and the email/name you used. We will delete your submissions within 30 days.
• Access your data: same email address; we will provide a copy of submissions tied to your email.

The platform is intended for users 13 and older. We do not knowingly collect personal information from children under 13. Volunteer applications include an age-group field; minors should apply with parental consent.

If we update this policy materially, the “Last updated” date above will change and we will note the change on the events landing page.

Questions: privacy@todaytelugu.net · See also our Terms of Service and contact page.