Privacy policy
This policy is a draft. It will be reviewed before Wicked Curious launches publicly, and we'll email account holders about any material change.
The short version
We collect your name, your email address and the filters you choose, so we can send you a weekly email of events. We don't sell or share your information, we don't use advertising or analytics trackers, and you can delete your account at any time.
Who we are
Wicked Curious (wickedcurio.us) is an independent, non-commercial guide to events around Arlington, Massachusetts. Contact: hello@wickedcurio.us.
What we collect
You can browse and filter events without an account, and we don't collect anything about you when you do, beyond the short-lived server logs every website keeps (see "How long we keep it").
If you create an account, we store:
- your first name, last name and email address;
- your time zone, so emails and calendar times are right for you;
- your feed: the towns, topics, ages, times and other filters you choose, and your email schedule;
- when you signed up, when you last signed in, and when you accepted the terms;
- which weekly emails we sent you, whether they were delivered, and which event links in them you clicked.
If you suggest a place for the Free Range, we store only what you type into the form: the place's name, town, kind of play, an optional link and an optional note. We don't ask who you are. To limit how many suggestions can be sent, we keep a scrambled (hashed) form of your IP address for up to a day.
We don't collect your location, your birth date, payment details, or anything about your children. Age filters describe who an event is for; they don't create a profile of anyone.
Why we use it
- To sign you in (by emailing you a single-use link) and keep you signed in.
- To build and send your weekly email and your personal calendar feed.
- To know whether the weekly email is useful, by counting clicks on its event links. We look at these counts in total, not to watch individuals.
- To protect the service, for example by limiting how often sign-in links can be requested.
Cookies
We use two cookies, both needed for the site to work: one keeps you signed in, and one protects forms against cross-site request forgery. We use no advertising, analytics or third-party cookies.
Who processes it for us
These companies process information on our behalf, only to run the service:
- Render hosts the website and its database.
- Resend sends our emails, so it handles your email address and the emails we send you.
- Anthropic helps us sort and summarize event listings. It receives only public event information from venue websites, never anything about you.
- The US Census Bureau geocoder confirms which town a venue is in. It receives only venue addresses, never anything about you.
- An off-site storage provider keeps nightly backups of our database.
We don't sell, rent or share your personal information with anyone else.
How long we keep it
- Your account information, for as long as you have an account.
- When you delete your account, it's deactivated at once and your personal information is deleted within 30 days. Database backups are kept for 30 days, so a deleted account disappears from them within 30 days after that.
- Sign-in links expire after 15 minutes. They, and the IP address that asked for each one, are deleted the next day.
- Server logs, which include IP addresses, are kept by our hosting provider for a limited time to keep the service running and secure.
Your choices
- Change your name, email address or filters in your settings at any time.
- Stop the weekly email with the one-click unsubscribe link in every email, or in your settings.
- Delete your account in your settings.
- Ask us what we hold about you, or for a correction, at hello@wickedcurio.us.
Age
Accounts are for adults 18 and older. We don't knowingly collect information from children. If you think a child has created an account, email us and we'll delete it.
Security
We don't use passwords. Sign-in links, calendar addresses and unsubscribe links are stored only in a scrambled (hashed) form, and all traffic to the site is encrypted.
Changes
If we change this policy in a way that matters, we'll update this page and email account holders before the change takes effect.