Privacy Policy

What we collect

Location and preferences

If you use the "Use my location" button to choose a city, your browser asks permission before sharing your location. If you allow it, your coordinates are sent to Access Events so we can find the nearest covered city. We do not save those coordinates to an account or profile, but they may appear in ordinary security or request logs, including logs handled by Cloudflare.

If you are signed in, we store your display name, preferred language, color theme, default city, disability-community preference, and event-type preference on your account so those choices are available across devices. If you are not signed in, language, theme, and default-city choices stay in your browser only. We also use basic security cookies for forms and one-time confirmation pages. These are not advertising cookies.

Events, reports, and public sources

If you submit an event or report an inaccuracy, we collect the details you provide so editors can review and update listings. Event details can include organization names, organizer names, speaker names, venue names, public contact emails, public phone numbers, event links, accessibility notes, and anything else you choose to include. If the event is approved, those public event details may appear on the event page. Your submitter email is used for editorial follow-up, abuse prevention, security, or legal requests, and is not displayed publicly unless you also provide it as the event's public contact email.

Editors and automated tools may also collect publicly available event information from organization websites, public calendar feeds, and public mailing-list archives. That information may include organization names and the names or contact details of people publicly associated with an event. Source owners, organizers, and named contacts can email [email protected] to request corrections, removal, or ask us not to collect future listings from that source.

Address lookup

Address suggestions and geocoding are provided by Photon, operated by Komoot. When you use address lookup, Access Events sends the address text to Photon from our server. If editors need to map a submitted address, Access Events may also send that address to Photon for geocoding. If you choose a suggestion, we store the selected coordinates with the submission so editors can review the location.

Email, newsletter, and notifications

If you subscribe to event reminders, we store your email address, reminder choices, and an unsubscribe link. Buttondown hosts the weekly email list and handles newsletter signups, delivery, and unsubscribes. Resend sends service emails for Access Events, such as confirmations, reminders, correction links, approval or rejection notices, and unsubscribe emails.

For push notifications, we store a device token, city subscriptions, recurring-series subscriptions, and favorite event IDs. Apple receives the device token and the notification message so it can deliver the alert.

Donations

Donations are processed by Stripe Checkout. Stripe receives the payment and contact information you enter at checkout and stores payment details. We may receive or view donation amount, frequency, payment status, receipt email, and receipt links to confirm the donation and respond to donor questions. We do not see or store full card numbers.

Logs and abuse prevention

Like most websites, we keep server logs and temporary IP-based counters to debug problems, protect forms and APIs, and limit abuse. Logs may include IP address, browser details, timestamp, and the requested URL. Event detail pages also keep a simple view count without storing the viewer's IP address or browser.

Email you send us

If you email us, we keep your message to respond to it. We do not add that address to the weekly email unless you separately subscribe.

How we use information

We use information for the purposes described here: running the public event calendar, reviewing and correcting listings, remembering your preferences, sending requested emails or notifications, processing donations, preventing abuse, keeping the site secure, and responding to questions.

What we don't do

We do not ask you to prove or disclose disability status. If you choose a disability-community filter, favorite events, subscribe to reminders, or submit disability-related event information, we use that information to provide the calendar, reminders, favorites, editorial review, and related support. We do not sell it, use it for ads, or use it to decide whether you can use the site.

We do not try to detect disability status, assistive technology use, screen readers, or accessibility settings, and we do not use those things for analytics, targeting, or different treatment. We also do not build advertising profiles or cross-site behavioral profiles.

Third parties we use

We use service providers to run the site, and they process information needed for those services:

• Cloudflare helps deliver and protect the site, including Turnstile checks on public submit and report forms when enabled. Because requests pass through Cloudflare, it may process IP address, browser details, pages requested, timestamps, form submissions, API requests, and security logs.
• Umami, which we self-host, gives us traffic statistics such as pages viewed, referrers, browser type, search query text, RSS generator selections, and report reasons. It does not set cookies, and we do not send report details, submitter email addresses, or other free-text form contents to Umami.
• Google provides the site's fonts and receives ordinary request information when the fonts load.
• Stripe processes one-time and monthly donations.
• Resend sends service emails such as confirmations, reminders, and cancellation notices.
• Buttondown hosts the weekly email list.
• Photon, operated by Komoot, powers address autocomplete and geocoding.
• Apple delivers requested push notifications to Apple devices.

Their privacy policies are available here: Cloudflare, Umami, Google, Stripe, Resend, Buttondown, Komoot, and Apple.

Calendar subscription links are public: anyone with the link can subscribe. We do not keep a subscriber list for calendar feeds, but feed requests may appear in normal server logs.

Children

Access Events is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Please do not submit personal information about children, attendees, or private individuals unless you have permission and the information is meant to be public event contact information. If you believe a child under 13 submitted personal information, email [email protected] and we will take reasonable steps to review and delete it as appropriate.

Data retention and deletion

Event submissions and reports are kept while they are useful for reviewing, correcting, or explaining event listings. Email reminder subscriptions are removed when you unsubscribe, though records that prevent accidental re-subscription and related logs may remain for a limited period. Push notification and favorite data stays until you remove it in the app or ask us to delete it. Donation confirmation records are kept as needed for payment, accounting, or legal records. Server logs are rotated periodically.

Privacy rights and GDPR

If privacy law requires a legal reason, we usually rely on your consent for optional choices like location lookup, saved preferences, reminders, newsletter signup, and push notifications. We rely on our legitimate interests to run and protect a public event calendar, review submissions, correct listings, maintain public event records, and use public event information. We use payment information as needed to process donations through Stripe and keep required payment or accounting records.

Where GDPR treats your own disability-community choice, favorite, reminder, push subscription, or disability-related information you provide about yourself as sensitive information, we rely on your explicit consent because you chose to provide or save it. You can withdraw that consent by changing or deleting the choice, favorite, reminder, or push subscription, or by emailing us.

For public-source or submitted event details about named organizers, speakers, or contacts that may suggest a disability connection, we rely on keeping a public event calendar accurate and on the information having been made public for the event where privacy law requires that. Named people can ask us to correct, remove, or avoid future use of that information.

Some service providers may process information in the United States or other countries. Where GDPR applies, we rely on available transfer safeguards such as adequacy decisions, EU-US Data Privacy Framework certification for certified providers, or standard contractual clauses. Email us if you want more detail about the safeguard used for a provider.

You can ask us to access, correct, delete, restrict, object to, or receive a portable copy of personal information we hold about you. Where we rely on consent, you can withdraw it at any time; that does not affect what we did before withdrawal. You can also object to our use of public-source event information about you, and you can unsubscribe from reminder or newsletter emails at any time. If GDPR applies to you, you may also have the right to complain to your local data protection authority.

To make a privacy request, email [email protected] with enough information for us to find the record.

Contact

[email protected]