Privacy

What we collect, and why

If you make an account, we store:

• Your email address and a password (stored scrambled, never in plain text) — so you can log in.
• Your name — shown to a club when you join or are invited to it.
• The event categories you prefer — to shape what you see.
• The events you save or mark interested — that's your saved list and the interest count on an event.

If you run a club, we also store the club's name, description, logo, and the events you post. That content belongs to the club.

We do not ask for your phone number, your student number, or a photo of yourself. Pinnit has no profile pictures for people.

Usage analytics — on ordinary browsing

To understand what's useful, we record basic usage: which page was viewed, a random per-visit ID, and a rough page count. This happens as you browse, whether or not you are signed in. If you are signed in, these records are linked to your account; if you are not, they are not tied to a name. We keep them for 90 days, then they are deleted automatically. We do not use them to build an advertising profile, because we do not run ads.

The map, and Google

Our map page uses Google Maps. When you open it, your browser talks to Google to load the map, which means Google receives your device's IP address. This happens only on the map page — not on the rest of the site. Elsewhere, a "Get directions" link points to Google Maps but only contacts Google if you click it.

Who else receives your information

We run Pinnit on a few services, and they process data on our behalf:

• Vercel — hosts the website and sees ordinary web-server information (your IP, the pages you request).
• Supabase — stores the database and handles logins.
• Resend — delivers our account emails (sign-up confirmation, password reset), so it handles the email address those are sent to.
• Google — the map, as described above.

We do not sell your information to anyone, and we never will.

Where your data is stored

Our database and hosting are in the United States (Oregon). We are a UBC project and most of our users are in Canada, so it's worth being clear: your data is held outside Canada, and is subject to the laws of the country it sits in.

Deleting your account

Email us through the contact form and ask, and we'll delete your account. Here's what that actually does:

• Your profile, saved list, interests, club memberships, and any invitations you sent are deleted.
• Your usage-analytics records are kept but unlinked from you — the name is removed.
• Events you personally posted are deleted.
• If you run a club with other members, the club is handed to another memberrather than deleted — its events don't vanish. If you are a club's only member, we'll ask you to hand it over or delete it first, so the club isn't destroyed by accident.

Messages you send us

If you write to us through the contact form, we store your name, email, and message so we can read and reply. Only our admins can see them. We keep them for up to 12 months, then they're deleted automatically — or sooner if you ask. You don't need an account to write to us, and we don't use the address for anything but replying.

Age

Pinnit is for UBC students, and we do not knowingly collect information from children.

Reaching us

The contact form is the way to reach us — for questions about your data, to delete your account, or anything else.