Effective date: June 16, 2026
Corkbord ("we," "us," "our") operates the Corkbord mobile app and website (corkbord.co). This policy explains what data we collect, why we collect it, and what choices you have.
1. What you can do without an account
You can browse the event feed, view event details, and use the map to discover events near you — all without creating an account or providing any personal information. When you use the app without an account, we process your device's approximate location on our servers to show nearby events, but we do not store your location in our database.
2. Data we collect
Account information (only if you sign up)
- Email address — required for account creation and login
- Display name — required during registration
- Username — optional
- Profile image — optional
We use email/password authentication. Passwords are hashed; we never store or have access to your plaintext password.
Session data
When you log in, we create a session that records your IP address and user agent string (browser or app version information). Sessions expire automatically.
Event content
When you create an event (with or without an account), we store the event details you provide: title, description, date/time, venue name, and venue location (geographic coordinates). We record whether the event was created by an authenticated user or anonymously. We do not collect your IP address or device identifier when you create an event anonymously.
Location data
We store venue locations (geographic coordinates of event venues). This is the location of the event, not your personal location.
When you use "near me" discovery, your device sends its approximate location to our servers so we can find events near you. We use this location for the query only — we do not store your personal location in our database.
Cookies
We use a session cookie to keep you logged in. This cookie is used solely for authentication. We do not use advertising cookies or tracking cookies.
Analytics
We use anonymized product analytics to understand which features are used and how. Our analytics provider receives an anonymous user ID and basic device metadata (operating system, screen size, app version) but not your email address, name, or location. We do not use analytics for advertising or profiling.
AI-assisted event creation
When you use our "paste a URL" or "snap a flyer" feature, we send that content to a third-party AI service to extract event information (title, date, time, venue, description). We send only the URL or image you provide — no personal information is included in these requests. We store both the original source material and the extracted event data.
Push notifications
We may offer optional push notifications in the future (for example, reminders about events you saved). If we do, we will request your permission first, and you can disable notifications at any time in your device settings. Push notification tokens would be stored solely to deliver notifications you opted into and would not be shared with third parties.
3. Data we do NOT collect
- Phone numbers
- Date of birth or age
- Payment or financial information (we do not process payments)
- Device identifiers or fingerprints
- Contacts, photos, or other on-device data (beyond images you explicitly provide for event creation)
- Health, biometric, or demographic data
- Advertising identifiers
4. How we use your data
- Provide the service — display events, enable search and discovery, authenticate your account
- Location-based discovery — show events near your current location (processed at query time, not stored)
- Event creation — store and display events you create, including AI-assisted extraction
- Security — detect abuse, rate-limit anonymous creation, moderate content
- Improve the product — understand which features are used and how (via anonymized analytics)
We do not sell your data. We do not use your data for advertising. We do not build advertising profiles.
5. Third-party services
We share data with these third-party services, and only as described:
- Analytics provider — receives anonymized usage events. Does not receive your email, name, or location. Data is hosted in the United States.
- AI service provider — receives URLs or images you submit for event creation. Does not receive personal information.
- CDN and security provider — processes web requests to provide security and performance. Your IP address passes through their network as part of standard web traffic.
We do not share your personal information with any other third parties.
6. Data retention
- Account data — retained as long as your account exists. If you delete your account, we remove your personal information within 30 days.
- Session data — sessions expire and are removed automatically.
- Event content — events you create remain visible as long as they are relevant. You can request removal of events you created.
- Analytics data — anonymized analytics are retained for up to 24 months, then deleted.
7. Your rights and choices
Regardless of where you live, you can:
- Browse without an account — no personal data required
- Request your data — email us to receive a copy of the personal data we hold about you
- Request deletion — email us to delete your account and associated personal data
- Correct your data — update your name, username, or profile image in the app at any time
- Withdraw location permission — revoke location access in your device settings at any time; the app will still work, but "near me" features will be unavailable
If you are in the European Economic Area, United Kingdom, or California, you may have additional rights under GDPR, UK GDPR, or CCPA respectively (such as the right to data portability or the right to object to processing). Contact us to exercise these rights.
8. Data security
We use industry-standard measures to protect your data, including encryption in transit, secure cookies, hashed passwords, and access controls on our infrastructure. No system is perfectly secure, but we take reasonable precautions and will notify affected users promptly if a breach occurs.
9. International data transfers
Corkbord's servers and third-party services are located in the United States. If you use Corkbord from outside the United States, your data will be transferred to and processed in the United States. By using the service, you acknowledge this transfer.
10. Children's privacy
Corkbord is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@corkbord.co and we will delete it promptly.
11. Anonymous event creation
You can create events without an account. Anonymous events are subject to rate limiting and moderation. Your IP address may be used transiently for rate-limiting purposes but is not stored in our database. We do not collect your device identifier when you create an event anonymously. A business may later "adopt" (claim ownership of) an anonymous event — this does not reveal the original creator's identity, because no identity was collected.
12. Business accounts and event adoption
Businesses can claim events they host. When a business adopts an event, the adoption is logged in an audit trail. The original creator's information (if any) is not erased — ownership is transferred while preserving the creation history.
13. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you through the app or by email (if you have an account). The "Last updated" date at the top of this page reflects the most recent revision.
14. Contact us
If you have questions about this privacy policy or want to exercise your data rights, contact us at:
- Email: support@corkbord.co
- Website: corkbord.co