Privacy and terms of use

Data collected

For hosts: email, first name or nickname and password (stored as a hash). For guests: the display name and, if they wish, their arrival time, dietary requirements and a comment. This optional information is only visible to the event’s hosts and the person concerned.

Home address (optional): it is never shown on your profile or sent to other members. It prefills “At my place” when you host and, only if you tick “My friends can host a party at my place”, it is added to a party a friend hosts at your place (visible to its hosts and guests). You can remove it at any time in “My account”.

Venues: a venue’s name, type, address and website are public to signed-in members, as are its public events.

Party location: members who can see a party without being signed up for it (the hosts’ friends, or all members if it’s public) only get the town and a deliberately offset pin, accurate to about 1 km; the address is reserved for participants, unless the host chooses to show it (bar, venue…).

“Near me” (optional, off by default): if you turn it on, members in your town and nearby who have also turned it on see your display name, username, photo and town, with a distance calculated between towns (never from an address). You can turn it off at any time in “My account” or “Friends”.

Payment details for repayments (optional: PayPal.me, Revolut, IBAN and account holder): never shown on your profile. They are only shown to the person who owes you a suggested repayment in a party you both attend, when they pay you back. Hosts don’t see them.

Friend groups: visible only to you; your friends don’t know which groups you’ve put them in. Carpooling: the starting point and time you give are visible to the party’s participants; passengers’ names follow the party’s “guest list” setting.

Calendar subscription (optional): a secret personal address gives your calendar the list of your parties (title, date, place if you have access to it). You can regenerate or turn it off at any time; the old address then stops working.

Email notifications: you choose when signing up, then in “My account”, what deserves an email (invitations, changes of date or place, reminder the day before, assigned needs, requests…). They are only sent to a confirmed address, and every email contains a one-click unsubscribe link. To avoid sending the same reminder twice, Festiplan keeps track of which reminders were sent (deleted with the party or the account). Guests without an account receive no notifications. Security emails (address confirmation, forgotten password) don’t depend on these choices.

Phone notifications (optional): only on devices where you tap “Turn on”, and for the topics you keep in “My account”. Festiplan stores the technical address your browser gives it for that device (notification service from Google, Apple, Mozilla or Microsoft), two encryption keys and the browser name (e.g. “Safari on iPhone”). The content of each notification is encrypted for your device only: the service that carries it cannot read it. The device is forgotten when you turn it off, when you log out, when the service reports it as expired, or with the account.

Your member profile (name, username, photo, town, number of mutual friends, parties in common) is visible to members you have a connection with: friends, a friend request, a shared party that shows its guests, a request to come to a party, or “Near me” if you turned it on. Your bio is only shown to your friends; your email never.

A party’s photos and videos: visible only to the party’s members (hosts and guests who are going; once the party is over, those who went). After it ends, the party is no longer visible to others and nobody can sign up any more; those who were there find it in their history.

Invitation link previews: when a link is shared in a messaging app, it shows the title, the date, the host’s first name and the cover photo. Never the address or the guest list.

On your device: for offline use, the app keeps a copy of the pages you opened and, for personal invitation links, the party’s essentials (date, address, access details). Nothing is sent elsewhere; saved pages are cleared when you log out and parties that ended more than a week ago are forgotten.

Cookies: a session cookie (sign-in, essential), a flag with no personal data (fp_session) used only to send you straight to your parties when you’re signed in, and your chosen language (fp_locale, and fp_ulocale for your account’s language). No advertising or analytics cookies.

Language: the one you choose (or, failing that, your browser’s) is saved with your account so we can write to you in that language.

Photos and videos

Profile photos, party photos and memories are stored in a private space (Microsoft Azure, Europe): they are only visible to the event’s hosts and guests, through temporary links. Before upload, photos are compressed and their metadata (including GPS location) removed; videos are uploaded as they are. Everyone can delete their own posts, and hosts can remove any memory. Files are deleted with the event or the account.

Purpose

Data is used solely to organise the event concerned. It is never sold or used for advertising.

Your rights

From the “My account” page, you can export your data as JSON and delete your account. Parties you created are deleted, unless they have co-hosts: they then pass to the longest-standing one. Your venues likewise pass to another manager if there is one (otherwise they are deleted). Your photos, videos and messages are deleted. A guest can ask the host to remove their entry.

Money

Festiplan calculates suggested repayments but makes no payments: “Pay back” only opens the recipient’s payment app (PayPal, Revolut) or shows their IBAN, and “I’ve paid” records what the payer declares. Transfers happen outside the app.