Privacy Policy

2359 ("we", "us") runs the 2359 app. We are the data controller. Contact privacy@2359.live. We are EU-first and follow the GDPR.

What we collect and why

• Email — to sign you in with a one-time code (there is no password). It is never shown to other users.
• A face photo — required at signup, because a real face keeps the floor safe. You control who sees it, per event, and it can be hidden. It is stored privately and served only through short-lived signed links; we do not use it to identify you biometrically.
• Location — only when you check in, to confirm you are at the venue and to show who else is at the same event. We do not track your location in the background.
• Gender and LGBTQ+ status (self-ID) — this is sensitive (special-category) data. We store it only if you give explicit, separate consent, we never show it on your profile, and it is used solely to decide which signals you can receive. You can change it or withdraw consent at any time, and withdrawing consent erases it.
• Your activity — signals, chats, check-ins, crew, saved events, stubs. Signals and event/crew chats are visible only to the people they are meant for, and signals expire.

How long we keep it

Signals expire and are deleted. Your check-in history, saved events, crew and stubs are yours and stay until you delete your account. If you delete your account, we remove your personal data. Where someone has been reported, we may retain the minimum evidence needed to handle abuse, as allowed under GDPR Article 17(3)(e).

Who we share it with

• We do not sell your data.
• Businesses (venues, artists, promoters) only ever see aggregate counts. They never see who you are, your signals, or your chats.
• We use Supabase to store data securely, hosted in the EU, and Resend to send sign-in emails. They process data only on our instructions under data processing agreements.

Your rights

At any time, from inside the app or by emailing privacy@2359.live, you can get a copy of your data, correct it, delete your account and data, or withdraw consent (for example, stop us using your self-ID). You can also complain to your local data protection authority.

Safety and security

Data is encrypted in transit. Access is restricted so people can only see what they are meant to — including per-viewer anonymity in rooms, so someone outside your chosen audience never learns who you are. Screenshots are discouraged in signal and chat views.

Children

2359 is for adults only. You must be 18 or older to use it, and we ask your age before you enter.

Changes

If we change this policy we will update the date above and let you know in the app.