Privacy Policy

1. Controller

Jan Auras
Lenbachstr. 17
10115 Berlin
Germany
Email: hello@citreasurehunt.com

2. What this site does

CI Treasure Hunt is a non-commercial public directory of contact improvisation events and communities worldwide. We do not sell tickets, process payments, or organise events. We link to external organiser pages.

3. Hosting and server logs

This website is hosted by Vercel Inc. When you visit, technical data including IP address, browser type, requested pages, and access time may be logged by Vercel for security and stability purposes. We do not use these logs for profiling or tracking. See Vercel's privacy policy for details. Legal basis: Art. 6(1)(f) GDPR - legitimate interest in operating a stable website.

4. Analytics

This website uses Vercel Web Analytics to measure aggregate traffic (page views, referrers, top pages). Vercel Analytics is designed to be privacy-friendly: it does not use cookies or persistent identifiers, and does not track visitors across sites. A short-lived hash derived from the visitor's IP address and user agent is used for unique visitor counting and is not stored. The resulting data is aggregate only. It is processed by Vercel Inc. (US) under Standard Contractual Clauses. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in understanding how the site is used so we can improve it.

5. Event data

Event listings are stored in a database provided by Supabase Inc. (US). This data is publicly displayed on the site. It consists of event details compiled from public sources and does not include personal data beyond organiser names and contact links that are already publicly available. Data transfers to Supabase are governed by Standard Contractual Clauses (SCCs) under Art. 46(2)(c) GDPR. See Supabase's privacy policy for details.

6. Newsletter

Newsletter signup is handled via an external EmailOctopus page. When you sign up, your name and email address are stored by EmailOctopus. Their privacy policy applies to that data. We do not receive or store your email address on our own systems. Legal basis for any data we may later process directly: Art. 6(1)(a) GDPR - consent. You can unsubscribe at any time via the link in any newsletter email.

7. Your rights

Under the GDPR you have the right to access, correct, or delete personal data we hold about you, to restrict or object to processing, and to data portability where applicable. To exercise these rights, contact us at hello@citreasurehunt.com.

You also have the right to lodge a complaint with the supervisory authority responsible for Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit.

8. Reports

When you submit a report via the report form on event, venue, or teacher pages, a daily-rotating hash of your IP address is stored to prevent abuse. This hash cannot be used to identify you and is not shared with third parties. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in preventing spam and abuse.

9. Changes to this policy

This policy will be updated when new features affecting data processing are added. The date at the top of this page reflects the most recent revision.