Privacy policy

Who is responsible?

Dimitrios Moustakas, based in Athens, Greece, runs TellMeFirst and is responsible for how the service uses your personal data. For privacy questions or requests, email [email protected].

What do we keep?

• If you create events: your name, email, sign-in details and the events and updates you create. If you sign in with Google or Apple, we receive the account details needed to sign you in, not your password.
• If you subscribe by email: your email address, the event you chose and records of confirmation, cancellation and delivery.
• If you use Wallet: pass identifiers, save or removal records and the technical details needed to update your pass. Apple also provides a device identifier and push token. You do not need to give TellMeFirst your name or email for this.
• If you pay: payment references, amounts, currency and payment status. Stripe handles your card details. We do not store your full card number.
• If you report an event: the reason, any details you write, a copy of the event title and final message, and when the report was sent and reviewed. You may also provide an optional, unverified contact email so we can ask about your report. It is visible only to our administrator and included in the private report notification. It does not subscribe you to updates. We do not ask for your name.
• When you use the site or contact us: necessary session information, security logs and the messages you send us. Technical records can include an IP address and browser details.

Why do we use it?

We use account and payment data to provide the service you ask for. We use your subscription choice to confirm your subscription and deliver the event's final update.

In legal terms, our grounds are the contract with creators, consent for event notifications, our legitimate interest in running a safe service, and legal duties such as keeping required payment records.

Giving us an email address for one event does not sign you up for marketing. We do not sell subscriber lists.

What can other people see?

Your event title, creator display name and final update are public. Do not put private information in them.

Creators see subscription counts, not subscriber names or email addresses. Counts measure subscriptions, not unique people. Email and Wallet subscriptions are not secretly matched into a personal profile.

Which other services help?

Apple and Google provide sign-in and Wallet features when you choose them. Stripe handles checkout. Hosting and email delivery services also process the data needed to run TellMeFirst.

We use Cloudflare Turnstile on report forms and email subscription forms, including embedded widgets to help block bots and spam. Cloudflare checks technical information from your browser for this security check. Read Cloudflare's Turnstile privacy notice.

These providers have their own privacy notices. Our final notice will identify the production hosting and email providers and explain any processing outside the European Economic Area and the safeguards used.

Cookies and visit statistics

We use necessary cookies to keep sign-in working, protect forms and remember a browser's Wallet session. These are separate from advertising cookies.

We plan to use Plausible Analytics to understand visits to the site. It is not active on this version yet.

Plausible reports things such as pages visited, referral sources, country and device type. Its standard service does not use cookies or lasting visitor identifiers. It briefly uses an IP address and browser information to count visits without storing the raw values. Plausible says visitor data is processed in the EU. Read Plausible's data policy.

How long do we keep data?

We need subscription and pass records while an event is open and while its final update is being delivered. We may also need records to resolve a problem, prevent abuse or meet legal duties.

Finishing an event or cancelling a subscription does not instantly erase every record. Public final updates stay on event pages. We are still setting the deletion schedule for the public service and will publish it here before launch.

Your choices and rights

You can cancel email updates using the link in your confirmation email, or remove a Wallet pass. You can also change Wallet notification settings on your phone.

You can ask to see, correct or delete your personal data. Where the law applies, you can also ask for a copy, ask us to limit its use, or object to certain uses. You can withdraw consent without changing whether earlier use was lawful.

Email [email protected]. We may need to check that the data belongs to you. We will normally respond within one month. You can also complain to your local data protection authority, including the Hellenic Data Protection Authority.