Privacy Policy

Last updated: June 19, 2026

What we collect

RealEvents collects the information you provide when creating an event or registering, as well as some technical metadata:

• Event organizers: event title, description, date, location, and optionally your name and email address.
• Attendees: name, email address, and any optional fields the organizer has configured.
• Technical metadata: IP address, browser type, language preference, and approximate location for abuse prevention and analytics.
• Analytics: we use Google Analytics 4 to collect anonymous usage data. No personal identifiers are sent to Google Analytics.

How we use your data

• To display your event page and process registrations.
• To send confirmation emails, reminders, and post-event recaps when an organizer email is provided.
• To generate anonymous, aggregated statistics (total events created, registrations).

Anonymous service measurement

To understand how the event-creation flow performs and where people drop off, we record a few anonymous steps of that flow (when the create form is shown, started, and submitted). This is first-party audience measurement: it is strictly limited to measuring our own service, keyed only to an anonymous identifier, with no personal data, no profiling, and no cross-site tracking or sharing with third parties. Under the CNIL and EDPB guidance on strictly necessary audience measurement, this limited first-party measurement does not require consent. It is separate from the optional analytics cookies (such as Google Analytics) covered by our cookie banner, which only run if you accept them.

Legal basis for processing

• Contract: creating your event page, processing registrations, and sending the related transactional emails.
• Consent: analytics cookies and email invitations the organizer chooses to send. You can withdraw consent at any time.
• Legitimate interest: abuse prevention, security, and aggregated statistics, never for advertising or profiling.

Data Processing Agreement

When you collect attendee data as an organizer, RealEvents acts as your data processor. Our Data Processing Agreement sets out that relationship under Article 28 of the GDPR. It is incorporated automatically into every event at the moment you create it.

Subprocessors

• Hosting: Hetzner Online GmbH, on servers located in the European Union (Germany).
• Analytics: Google Analytics 4, for anonymous aggregated usage data only.
• Error monitoring: Sentry, for diagnostic crash reports.
• Email delivery: Amazon SES (Amazon Web Services, EU region) and Brevo, to send transactional and invitation emails.

What we do not do

• We do not sell, rent, or share your personal data with third parties.
• We do not use your data for advertising or profiling.
• We do not require account creation or passwords - there is no authentication system.

Data storage and retention

Your data is stored in a PostgreSQL database hosted within the European Union (Hetzner, Germany). Organizers can delete their event and all associated registrations at any time through the manage link. We also apply an automated retention policy: personal data is first anonymized, then permanently deleted after a longer window, while aggregated statistics are preserved.

• Events: anonymized 24 months after the event date; aggregated rows kept.
• Registrations and invitations: anonymized 6 months after the event, deleted after 24 months.
• Analytics visits and events: anonymized after 3 months, deleted after 12 months.
• Email logs: anonymized after 6 months, deleted after 12 months.
• Contact and feedback messages: anonymized after 12 months, deleted after 24 months.

Invitations by email

When an organizer uses our "invite by email" feature, we store the email address of each invited person solely to send the invitation and let them respond (accept, decline, or unsubscribe). Organizers confirm they have permission to email these contacts before sending.

• Each invitation email contains a one-click unsubscribe link that stops further invitations for that event.
• Invitee email addresses follow the same retention policy as registrations.
• We never sell or share invitee email addresses, and we do not use them for marketing.

Cookies

We store your cookie preference locally in your browser so we can remember your choice. If you accept analytics, Google Analytics 4 sets its own cookies under this domain for anonymous, aggregated usage tracking. We set no analytics cookies until you accept, and you can change your choice at any time using the cookie settings banner.

Your rights

You may request access to, correction of, or deletion of your personal data at any time through our contact page.

How to access or export your data

Because RealEvents has no accounts, you access your data through your email address. Request a magic link at realevents.co/my-events and we email you every event you have organized, where you can view all your events and their registrations, export everything as a JSON file (data portability), and open the management link to edit or delete any event and its registrations.

If you registered for an event (as a guest, not the organizer), the confirmation email we sent you contains a personal link where you can view what we hold, export it, or permanently delete your registration yourself, no account needed. If you no longer have that email, you can still exercise your rights through our contact page.

Contact

For any questions about this privacy policy, reach us through our contact page.