Privacy notice

Operator/controller and privacy contact

For privacy and data-rights questions, contact littlelegendsevents@proton.me.

Information used by the service

Depending on how you use the service, this can include account and contact details; email-verification and account-security state; organisation memberships and roles; organisation profile/contact details; saved events and notification preferences; vendor applications and private workflow information; invitations; notifications and email-delivery records; event claims, publication requests and edit history; event reports and private moderation information; security/throttling metadata; and uploaded profile media.

Vendor origin/location information, where supplied, is private organisation data. The service does not persistently store a visitor's location merely for public discovery.

Why information is used

Information is used where necessary to provide requested account and platform functionality, administer the service, protect users and the platform, respond to support communications, comply with legal obligations where applicable, and honour choices for optional communications where applicable. This includes account security and recovery, event discovery, organiser/vendor workflows, moderation, abuse prevention, necessary audit/history, and administration of the open beta.

Emails, notifications and cookies

Account and security emails, including verification, password reset, invitation and security notices, may be needed to operate an account. Optional notification emails follow the preferences available in the account and require an eligible verified email address. In-app notifications can exist independently of optional email copies.

The service uses normal authentication, session and security cookies. It does not currently use advertising cookies, marketing trackers or advertising pixels. Optional Umami page analytics loads only when enabled for the public site.

Retention and service providers

Personal information is retained only as long as reasonably necessary for operating the service, maintaining account, security and audit integrity, resolving disputes or support issues, meeting legal obligations, and protecting the platform and its users. Some historical or audit records may need to remain when active account use ends.

Hostinger provides production hosting for the application, database and uploaded media. Brevo sends account and security emails. Private Backblaze B2 storage is used for off-site backups. The public map loads tiles from OpenFreeMap. Public venue address lookups may use OpenStreetMap Nominatim when geocoding is enabled.

Your data rights

You may contact us about access to your personal data, correction, account closure, deletion where applicable, restriction or objection where applicable, or questions about how your data is handled. We may need to verify identity before releasing or changing sensitive information. Never send a password by email.

We will review each request and explain what can be deleted, corrected, anonymised or retained where necessary. See Data Rights for the contact process.