Privacy Policy

Who runs this site

weddnesday.org is a small, non-commercial community site for biweekly Wednesday meetups for expats in Bucharest, Romania. It is run by Tudor, who is also the contact for everything on this page: tudor@weddnesday.org. There is no company registration number, no VAT number, no registered office and no Data Protection Officer to list here. If a form asks for an organisation name, use "weddnesday.org, Tudor".

What we collect and why

Reading the site needs no account. Accounts are optional and are only needed if you want to RSVP to a meetup. There are three ways to sign in: Google, Telegram, or an email address with a password.

If you create an account

We store:

• Your email address. Telegram accounts have no email, because Telegram does not give us one.
• The name supplied by Google, or the name you type yourself.
• An optional public display name that you choose.
• An internal provider identifier: the Google subject id, the Telegram user id, or the email address itself for email accounts.
• Your account level: member, organizer or admin.
• The date the account was created and the date you last signed in.

Why: an account cannot exist without these fields. In plain terms, this is the contract basis: we keep what is needed to create your account, keep you signed in and show the right name. Signing in is voluntary and nothing here is needed to read the site.

If you RSVP to an event

We store which account joined which event, and when. Attendee counts are public. The attendee list, with names and emails, is visible only to the organizer for that city.

Why: organizers need to know who is coming and how many people to expect. In plain terms, this is our legitimate interest in running a safe, correctly sized meetup.

What we do not store

We do not store passwords in readable form; only bcrypt hashes are kept. We do not store IP addresses, browser fingerprints, phone numbers, Google profile photos or payment data. The site loads no Google-hosted images and no Google Fonts.

Sign-in providers

Google

When you sign in with Google, the site asks Google only to confirm your email address and your name. Nothing else from Google is stored. The site does not read your Gmail, Calendar, Contacts or Drive.

Telegram

When you sign in with Telegram, the site receives a Telegram user id and a display name only. It does not request your phone number and it cannot send you Telegram messages.

Email and password

You type an email address and a password. The password is stored only as a bcrypt hash and cannot be read back from the database.

Cookies

The site sets one cookie, named weddsid. It is HttpOnly and SameSite=Lax, and it is used only to keep you signed in. It is not used for advertising or tracking. If you block it you can still read the site, but you cannot stay signed in.

Analytics

The public landing page loads PostHog, from us.i.posthog.com, to collect aggregate page-view and click statistics. This data is not linked to your account, and no email address is sent to PostHog.

Account pages are excluded: they are marked noindex for search engines, and the analytics script is only on the landing page, not on login, profile or organizer pages.

You can avoid the analytics entirely by blocking the script with a browser extension or content blocker. The site works normally without it.

Who else is involved

The third parties that actually receive data are:

• Google, for sign-in only.
• Telegram, for sign-in only.
• PostHog, for the landing-page analytics described above.
• A2 Hosting, which hosts the site on shared hosting. The server is in the Netherlands, in the EU, and the MySQL database is on the same account.

We do not sell data, and we do not share it for advertising.

International transfers

Google and Telegram are outside the EU, so signing in with either of them sends your sign-in data to their systems under their own terms and privacy policies. This is a real transfer outside the EU, and it is why sign-in is voluntary: if you prefer to keep data in the EU, use an email account, which is stored only on the EU hosting.

How long we keep data

Account data stays until you ask for it to be deleted. RSVP rows are deleted together with the account. Organizers are volunteers and can be removed by the site owner.

Your rights

You can ask for a copy of your data or for deletion by writing to tudor@weddnesday.org. There is no self-service export or delete button yet; requests are handled by hand, normally within a few days.

If you think your data is handled badly, you can complain to the Romanian data protection authority, ANSPDCP.

Children

The meetups are for adults. Accounts are not intended for anyone under 18, and we do not knowingly keep accounts for minors.

Accounts we remove

We can remove accounts that spam, harass other people, or fake attendance at events.

Changes and contact

If this policy changes, the date at the top of the page changes with it. Questions about privacy go to tudor@weddnesday.org.

See also the terms of use.