Privacy policy

hvaderpaa.dk is a private project operated from Prague (Czech Republic). For questions about your data, deletion, or anything else: info@hvaderpaa.dk.

Cookies (technical, required for the site to work):

• hvaderpaa_voter — anonymous identifier (UUID), valid 1 year. Lets you see your own “Going / Not going” votes on events.
• hvaderpaa_sid — session identifier, valid 30 minutes. Used to tell sessions apart in anonymous stats.

LocalStorage (stored in your browser):

• theme — your chosen theme (light / dark / auto).
• hvaderpaa_city — the city you filter by.
• hvaderpaa_tag_filter — your genre filters.

Visit stats (ours, on our server — no Google Analytics, no ad pixels):

• IP address — used only to derive country/city (see “Third parties”) and for security (scraper detection, anti-abuse). What we keep long-term is the SHA-256 cryptographic hash, not the IP itself.
• Country, city, region — derived from the IP via an external service (see “Third parties”).
• Browser type, operating system, language, mobile/desktop, bot flag.
• Page URL, query parameters, where you arrived from (referer).
• Your “Going / Not going” votes — tied to the anonymous hvaderpaa_voter cookie only, never to you personally.

• Your name, email, phone, address — we never ask, there’s no sign-up.
• Payment data — we don’t sell anything.
• Sensitive personal data (health, political views, religion, etc.).
• Ad profiles or cross-site retargeting.

• Without hvaderpaa_voter the site would forget your votes every time you opened a page.
• Without hvaderpaa_sid we couldn’t tell how many distinct visits we get.
• We only use stats to understand what visitors care about (regions, genres, events) — it’s about the aggregate, not you.
• IP geolocation is so we can show you events in your city right away.

Legal basis for processing: legitimate interest (Art. 6(1)(f) GDPR) in running and improving the site. Technical cookies don’t require consent — without them the site simply wouldn’t work.

• ip-api.com — free service that turns an IP into country/city/region. We send them your IP, get geo data back. We cache the result for 30 days so we don’t pester them on every visit.
• Let’s Encrypt — issues the TLS certificate for https. They know nothing about the site beyond the domain name.

We do not use: Google Analytics, Meta Pixel, third-party ad cookies, retargeting.

• hvaderpaa_voter cookie: 1 year from your last visit.
• hvaderpaa_sid cookie: 30 minutes of inactivity.
• Visit logs: 12 months, then deleted.
• “Going / Not going” votes: as long as you want — click again to clear, or just delete the hvaderpaa_voter cookie in your browser.

You have the right to:

• know what data we hold about you;
• ask us to fix or delete it;
• restrict or object to processing;
• complain to the data-protection authority in your own country — in Denmark that is Datatilsynet.

Since we never ask you anything and never store anything that names you, in practice “you” to us is the anonymous UUID in the hvaderpaa_voter cookie. If you want to make sure we hold nothing about you: delete cookies for hvaderpaa.dk in your browser. That puts us back to “we’ve never met”.

If anything changes (new external parser, new data we collect) we update this page and bump the “last updated” date.

info@hvaderpaa.dk