1. Overview

MyBoringTown ("the Service") is an event discovery platform. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

We believe in collecting only what we need and being transparent about how we use it. We do not sell your personal information.

2. Information We Collect

Account information: When you register, we collect your name, email address, and password (stored as a secure hash — we never store your actual password).

Location data: To show you nearby events, we may collect:

GPS coordinates from your device (only when you explicitly grant browser permission)
ZIP codes you manually enter
Your selected search radius

Location data is stored in your session (temporary) and is not permanently saved to your account. We apply a small random offset to GPS coordinates before any processing to protect your precise location.

Activity data: When you use the Service, we record:

Events, venues, and performers you like
Events you mark as attending
Your account preferences

Technical data: Like most web services, our servers automatically log standard request information including IP addresses, browser type, and pages visited. This data is used for security and service operation.

3. How We Use Your Information

We use the information we collect to:

Show you events near your location
Maintain your account and remember your preferences
Display your likes and attendance activity (visible to you; public counts are anonymized)
Send you account-related emails (verification, password reset)
Improve the Service and fix problems

We do not use your information for advertising, profiling, or any purpose other than operating the event discovery service.

4. Information Sharing

We do not sell, rent, or share your personal information with third parties, with these limited exceptions:

Email delivery: We use Amazon Simple Email Service (SES) to send account-related emails (verification, password reset). Amazon processes your email address solely for delivery and is bound by their own privacy policies.
Legal requirements: We may disclose information if required by law, court order, or governmental regulation.
Service protection: We may share information to investigate fraud, security issues, or violations of our Terms of Service.

5. Cookies and Sessions

We use cookies and server-side sessions for essential service functionality:

Session cookie: Keeps you logged in and remembers your location preference during your visit
CSRF token: Protects against cross-site request forgery (a security measure)

We do not use tracking cookies, analytics cookies, or third-party advertising cookies. There are no third-party trackers on our site.

6. Data Retention

We retain your account information for as long as your account is active. If you delete your account:

Your personal information (name, email) is removed
Your likes and attendance records are deleted
Anonymized or aggregated data (e.g., total like counts on events) may be retained

Session data (including location) expires automatically and is not permanently stored.

7. Data Security

We take reasonable measures to protect your information, including:

Passwords stored using bcrypt hashing (industry standard)
HTTPS encryption for all connections
CSRF protection on all forms
Role-based access controls for administrative functions

No system is perfectly secure. While we work to protect your data, we cannot guarantee absolute security.

8. Your Rights

You have the right to:

Access your personal data — your account page shows your stored information
Correct inaccurate data — edit your profile at any time
Delete your account and associated data — contact us to request deletion
Withdraw consent for location sharing — revoke browser location permission at any time; the Service will fall back to manual ZIP code entry

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For significant changes, we will make reasonable efforts to notify registered users.