Privacy

Spacetime is an event publishing service. Public visitors can read events pages without creating an account. This page describes the information used by this version of the service.

When you visit

Cloudflare delivers the website and may process technical request information, including IP addresses, for delivery, reliability and security. Spacetime does not include advertising trackers or a visitor analytics service. Fonts are served directly with the website.

When you sign in

We store your sign-in email, your organisation’s details and the saved locations and events in Cloudflare D1. Your email is used to identify your account and is not included on public pages. Resend processes your email address to deliver sign-in codes and, if you are a group administrator, membership-request notifications. It also delivers membership decisions and updates about event dates you joined. Spacetime does not send event invitations or maintain attendee mailing lists.

Bookmarks, membership and attendance

We store bookmarked groups and event dates with your account. Your bookmarks are private and are not shared with organisers. Bookmarking does not join a group or event, or subscribe you to messages.

When you request membership, join a group or join an event, we store your sign-in email and the membership or attendance status. The relevant group’s administrators can see your email and status. They are not shown publicly or to other participants. Membership does not grant administrator access. New requests that need approval send an email to the group’s administrators with the group name and a link to review requests after signing in. Applicant email addresses are not included in these emails. Approval and decline decisions are emailed to the applicant and appear in their account. People who joined an event date receive emails when it is cancelled, postponed, rescheduled, reinstated or its venue or joining details change. These emails go separately to each recipient; other participants’ addresses and online meeting links are not included.

You can remove bookmarks, withdraw requests, leave groups and cancel attendance. Leaving a group also cancels attendance at its members-only events. Administrator decisions to decline or remove membership or attendance are retained to enforce those decisions. Email delivery records are retained for up to seven days to prevent duplicate notifications and retry temporary delivery failures.

Group administrators can see each other’s sign-in email addresses. We also store email addresses added by an administrator so that those people can access the group when they sign in. These addresses are not displayed publicly, and adding an administrator sends no email. Each administrator can turn membership-request emails on or off for themselves in People → Your email preferences. This setting applies separately to each group and does not change another administrator’s preference. Bookmarking alone does not enable event-update emails.

Sign-in and security

We use a necessary, HttpOnly session cookie to keep you signed in for up to 30 days. Signing out removes that session. Sign-in codes expire after 10 minutes. We temporarily retain hashed codes, attempt counts and hashed IP addresses to limit abuse; expired records are cleared during subsequent sign-in requests.

Public information

Your organisation name, description, location, website and published event information are public. Use organisation contact information rather than personal details you do not want to publish. An events page that is not listed in the directory is still public, and search engines may find it.

External services

Organiser links may take you to external booking, payment, meeting or information services. Those providers have their own privacy practices. External booking details and payments remain with those services; Spacetime does not process event payments.

Optional embedded maps load from Google Maps or OpenStreetMap only when you select “Show map”. That provider then receives technical request information, including your IP address. Opening a map link takes you to the external map service.

Your events page and account

You can edit your organisation and events in the organiser interface, and return events to draft to remove them from public pages. Account deletion and data export are not yet available as self-service features. Operational contact and retention arrangements must be finalised before the service opens for general use.