ATHENS EVENTS
Sign in

Privacy Policy

Last updated August 13, 2026.

Athens Events ("we", "us") publishes a listing of nightlife, music and cultural events in Athens at athens.events. This page explains what data we collect from users who create an account, why, how long we keep it, and how to exercise your rights over it.

1. Data we collect

Account identity. When you sign in with Google or Facebook, the provider shares your email address, display name, and profile photo with us. We store these to show who's signed in and to personalize your experience. Legal basis: performance of a contract (providing you an account).

Behavioral signals. If you turn on personalization in your account settings, we record searches you run and genres/events you click on so we can tailor the events you see. This is off by default. Legal basis: your consent, which you can withdraw at any time from your account page.

Cookies. We use a single authentication cookie to keep you signed in. It's strictly necessary for the site to function and does not require consent under GDPR/ePrivacy. We do not use third-party advertising or tracking cookies.

2. Retention

Behavioral signal rows (searches, clicks) are kept for 90 days and then permanently deleted. Account identity data is kept for as long as your account exists, or until you delete it (see §4).

3. Who we share data with (processors)

  • Supabase (EU region, eu-central-2) — database, authentication.
  • Vercel — application hosting.
  • Cloudflare Turnstile — bot protection on the admin sign-in form only; it does not run on public pages.

We do not sell personal data to anyone.

4. Your rights

You can access, correct, export, or delete your data at any time from your account page. You can also object to or withdraw consent for behavioral tracking there. If you'd rather email us, use the address on our contact page and we'll action your request within 30 days.

5. Deleting your account & data

To permanently delete your account and all associated data:

  1. Sign in and go to your account page.
  2. Scroll to "Delete my account" and type the confirmation phrase shown.
  3. Click delete. Your profile, saved signals, and derived preferences are removed immediately; your login identity is deleted from our authentication provider.

If you signed in via Facebook and cannot access the app, you can also request deletion directly through Facebook's "Apps and Websites" settings, which will notify us to remove your data.

6. Children

Athens Events is not directed at children under 16 and we do not knowingly collect their data.

7. Changes to this policy

We'll update the "last updated" date above when this policy changes materially.