Privacy information for personal accounts

Optional approximate-area search

On the statewide events page, you can choose Use my approximate area. NearbyCalendar does not run this lookup automatically. Only after you click, the web server passes your current internet (IP) address to the local event service for one lookup against a MaxMind GeoLite2 City database stored on NearbyCalendar’s server.

The lookup is transient. The raw IP address, coordinates, and postal code are not returned to the browser, added to your profile, or stored as part of this feature. The lookup endpoint is not written to the Nginx access log. The browser receives only a coarse city, region code, country code, and rough accuracy estimate. When that city matches one unambiguous community in the current pilot, NearbyCalendar applies that exact community filter without adding the city to your keyword search.

Internet-address location is inherently imprecise and may reflect a network provider, VPN, or nearby population center instead of where you are. You can clear the suggested community filter at any time.

Information the account feature uses

• The first name, last name, and email address you provide, plus an optional phone number and a one-way password verifier. NearbyCalendar does not store your password in readable form.
• An optional phone number is profile/contact information only. It is not verified, cannot be used to sign in, and is not used for reminders. Any future phone contact or phone-based reminder use would require separate consent.
• Account session and security records needed to keep sign-in working and limit abuse.
• Short-lived, one-time verification and password-reset records. The link token itself is stored only as a one-way digest, not as readable text.
• The public event identifiers you save and the time each event was saved.
• Your reminder-email preference, lead-time choices, and per-event reminder choices.
• Email delivery records needed to send account-security messages and process bounces, complaints, or abuse. Reminder delivery remains a separate, disabled feature.

The current account build uses an email address and password. It does not connect to Google Calendar, Gmail, Drive, or another social sign-in provider.

How the information is used

• Authenticate you and protect your account.
• Verify that you control the account email and let you recover a lost password.
• Show the same saved-event list when you return on another device.
• Apply the reminder choices you make and cancel pending reminders when an event changes.
• Diagnose failures, prevent abuse, and operate the service safely.

The account implementation does not add advertising trackers. Hosting, database, and email-delivery providers may process the limited information needed to provide those services when the corresponding feature is enabled.

Your controls

• You can update your first name, last name, and optional phone number in account settings.
• You can save or remove an event at any time while signed in.
• Reminder email and individual event reminders are separate, opt-in controls.
• You can sign out without deleting the saved events held in your account.
• You can delete your account from account settings.

See Account data & deletion for the self-service deletion steps and help if you cannot sign in.

How long account data is kept

Active account data is kept while the account exists. Removing a saved event deletes that saved-event record. Deleting the account removes its live profile, including its first name, last name, and optional phone number, along with its sessions, saved events, preferences, pending account links, and pending reminder records. Encrypted backup copies may retain that deleted account data for up to 35 days and are not returned to the live service except during disaster recovery. Mail-server logs, delivery-provider suppression records, and security feedback sent to the support mailbox may remain for their separate operational retention periods and cannot always be removed immediately.