Privacy notice

Last updated 27 September 2026

This notice covers the personal data of people who use this website or hold a SocialEavesdrop account. Public platform data returned by the API is covered by the public data notice.

This website

• Beta list. If you join the list we keep your email address, the date, and the country your request came from. We use it to send one message when a place opens, and share it with no one.
• Contact form. We keep what you send us (your email address, topic and message) to answer it.
• No tracking. The site sets no cookies of its own and runs no analytics or advertising scripts. Our host, Cloudflare, processes connection data such as IP addresses, and may set a strictly necessary security cookie, to deliver and protect the site. We do not store IP addresses with your list entry.

Accounts

When you hold an account we collect: your name and email; a hashed password or sign-in identifier; encrypted two-factor secrets and passkey public keys; API keys (stored hashed; shown once); your credit ledger; request logs (operation, parameters, status, credits used, timing, IP address and user agent); payment references from our payment provider; and support correspondence.

We use this to run the service, secure your account, bill and refund credits, detect abuse and improve reliability.

Who we share it with

• Our payment provider, to take payment. We never see or store full card details.
• An email provider, for account and billing messages.
• Upstream data providers receive only the query needed to answer a request, never your account details.

How long we keep it

Request logs 90 days, then aggregated. Sessions until they expire plus 30 days. Account data until the account is deleted plus 30 days. Billing records for as long as accounting law requires. Beta list entries until the service opens or you ask us to remove them.

Your rights

You can ask to access, correct, export or delete your personal data, or object to how we use it, through the contact page. Account holders can export or delete their data from the dashboard.