Privacy statement

In short

• We only process what's needed to help you find a table.
• We show your town, never your exact address.
• No advertising, no selling of data. Visitor statistics only if you say yes to them.
• You can delete your account and data yourself at any time.

1. Who is responsible?

Tavernly is responsible for processing your data. Questions or requests? Email support@tavernly.nl.

2. What data do we process?

• Account data: your email address and an encrypted (hashed) password. If you log in with Google, we receive your email address via Google.
• Profile data: your display name, a short description, whether you're a player and/or DM, experience, availability and preferences you fill in yourself.
• Profile photo: you choose a drawing or upload an image yourself. We store an upload at a reduced size (384 by 384 pixels); in the process we discard all hidden information in the file, such as the location where a photo was taken. Your photo is visible to other logged-in users and on groups you're a member of. You can delete or replace it in your profile at any time.
• Town: you choose a place from a list. We store it at town level, no street or house number.
• Groups: groups you create or are a member of, and join requests.
• Your group's contact details: as an owner you can add a chat link and/or a phone number to your group. Only members you've accepted yourself can see them, never visitors of the public group page. We delete the number as soon as you delete your account.
• Technical data: a session cookie to keep you logged in, and an analytics cookie from Google Analytics for anonymous visitor statistics, unless you turn it off (see point 8). No advertising cookies.

3. What do we use it for?

Solely to make Tavernly work: managing your account, connecting you with groups and players nearby, processing join requests and sending you emails where needed (for example to verify your email address or reset your password). We don't use your data for advertising and we don't sell it.

4. What's visible to others?

Tavernly is meant for being found, so part of your profile is visible to other logged-in users:

• Your display name, description, role (player/DM), preferences and your town are visible. Logged-in users also see you as a pin on the map, at a random point within your town and never at your address. All of this disappears as soon as you set your profile to invisible in your profile settings.
• Groups you create and their descriptions can be publicly findable (also via the map and place pages).
• If you share your profile link yourself, anyone who opens the link, even without an account, sees your display name in the invitation to sign up. The rest of your profile stays visible only to logged-in users.
• Your email address and password are never visible to other users.

5. Legal basis

We process your data to perform the agreement with you (providing the service for which you create an account) and on the basis of our legitimate interest in keeping the platform safe and working.

6. Retention period

We keep your data as long as you have an account. If you delete your account, we erase your profile data. Your account is marked as “deleted” and your profile data is erased, so you can no longer be found. Minimal records may be kept briefly where legally required or necessary to prevent abuse.

7. Your rights

You have the right to view, correct or delete your data. You can arrange most of this yourself:

• View and edit: via your profile page.
• Delete: with the “Delete account” button on your profile page.

If you can't work it out, email support@tavernly.nl. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, NL) or the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, BE).

8. Cookies

To keep you logged in we use a functional session cookie; we don't ask for consent for that. We also use Google Analytics to see which pages are visited and where visitors drop off. We've set this up in a privacy-friendly way, following the guidelines of the Dutch Data Protection Authority: IP addresses are anonymised, Google Signals and advertising features are turned off, we don't share data with other Google services and we have a data processing agreement with Google. For this, Google places an analytics cookie and receives technical visit data (pages visited, browser, approximate location); we use this solely to improve Tavernly, never for advertising and not to track you personally. Because the privacy impact is therefore small, we measure from your first visit and mention it in a bar at the bottom. If you don't want this, choose “Rather not”: then we no longer load anything and we delete the analytics cookies. We store your choice in your browser and you can change it here at any time.

9. Where is your data stored?

Your data is stored on our own server within the European Union. For sending emails and (optionally) logging in via Google, we use reliable service providers, solely for that task. The map uses map tiles from OpenStreetMap; no profile information of yours is shared in the process.

10. Changes

We may update this statement when the service changes. The date at the top shows the most recent change.