Privacy🔒

Who we are

Where Hot Boys Go (“we”) runs wherehotboysgo.com, a travel and events guide for gay men. We are based in the European Union and act as the data controller for the personal data described here. Contact: hello@wherehotboysgo.com.

What we collect

• Account: your email address and the name and profile information shared when you choose Sign in with Apple or Google. Meta remains available only for existing website access. We never receive your password. Apple may give us a private relay address instead of your usual email.
• Club emails: only if you tick the box. Nothing is pre-ticked. You can turn them off at any time from your account or from any email.
• Plans, saved events, Passport and social presence: the weekends you plan, events you save or complete, and events where you join Who’s Going. On a gay travel service this can suggest your sexual orientation. We treat it as special category data and store it only after your explicit consent under GDPR Article 9(2)(a). You can withdraw each optional purpose from Settings.
• Calendar feed: paid members get a private calendar link. It is a key: anyone with the link can read the events you saved, so treat it like a password and make a new one from your account if it leaks.
• Memberships and purchases: Apple processes every new in-app subscription and guide purchase. We receive signed transaction identifiers, product identifiers, subscription status, refund or revocation status, and an account token that links the purchase to your account. We never receive card details. Existing web purchases remain mirrored from Paddle until those subscriptions end. Receipt product names are generic. The destination mapping stays inside our service.
• Messages to us: when you email hello@ or use the contact form we keep your address, name, subject and message, plus our reply. Cloudflare Workers AI reads each message once to suggest a topic and a draft reply for us; nothing is sent until a person reviews it, and the model provider does not keep the text.
• App and technical data: a Keychain session token, an installation identifier, push token and notification choices, content revision hashes, offline queue identifiers, and standard server logs kept for security for up to 30 days. Public content and owned guides may be cached on your device. Subscription guide caches expire after seven days without authorization.

Why (legal bases)

To run your account (contract). To store your plans and saved events, and to send club emails, your explicit consent (GDPR Article 6(1)(a) and 9(2)(a)), which you can withdraw at any time. To run your membership and process purchases (contract). To answer your messages, to keep the site safe and to comply with the law (legitimate interest and legal obligation).

Who helps us

Cloudflare provides hosting, functions and the database, which is stored in the European Union. Cloudflare also delivers our email, sorts our inbox with Workers AI, counts page views without cookies (Web Analytics) and runs the bot check on the contact form (Turnstile). Apple provides sign-in, in-app purchases and push notification delivery. Google provides sign-in. Paddle continues to manage legacy web billing. These providers act under their own terms and applicable data processing arrangements. We share nothing for advertising and run no advertising technology. A marked hotel partner link sends the destination, stay dates and a generic placement label. It sends no account id, email, handle, saved-event state or referring page.

Who’s Going

Who’s Going lets signed-in members who marked the same event see each other’s handle and avatar. It is off by default and turns on only after you give explicit consent on its own screen, separately from anything else. Marking an event shows other members that you plan to be there, and we treat that as sensitive data: it can suggest your sexual orientation. Legal basis: your explicit consent (GDPR Article 9(2)(a)), and nothing else.

• Who can see it: only signed-in members who also marked that same event and turned Who’s Going on. Not the public, not search engines, not advertisers, not members who did not mark that event, and nobody once the event has passed.
• What we collect for it: a handle you choose, an emoji avatar, an optional Instagram handle, the events you mark, your waves, and your blocks and reports. Never photos, real names or location.
• Your Instagram handle: optional, and shown only to a member you both waved at, under a separate consent.
• How long: marks and waves are deleted 14 days after the event ends; your consent answers are kept while you are opted in and then three years; blocks last as long as either account exists; reports are kept two years after we close them.
• Turning it off: one click in your account, which deletes every mark and every wave the same moment.

Reporting content and contact point

To report a member or anything on the site, use Report next to any handle, or email hello@wherehotboysgo.com. We acknowledge every report, decide within 48 hours, and tell the member concerned why, with a way to appeal. That address is also our point of contact under the EU Digital Services Act.

Cookies

We use one strictly necessary cookie for your session. No advertising cookies and no third-party trackers. Page views are counted with Cloudflare Web Analytics, which sets no cookie and stores no personal data, and never runs on account pages. The contact form’s Turnstile check may use a short-lived security token.

Consent records

Every time you give or withdraw a consent we store your account id, what you consented to, the exact wording you saw, its version and the time. We do not store your IP address with it. We keep that record while your account exists and for three years after a withdrawal or deletion, so we can show we asked.

Your rights

You can access, correct, export or delete your data, and object to or restrict processing. Use Settings in the native app or email us. Legacy web billing access remains available only to members with an existing Paddle subscription. You can also complain to your local data protection authority.

Delete your account and data

1. Open Settings in the native app and choose Delete account.
2. Choose Delete account and confirm.

Deletion removes your profile, linked sign-ins, push tokens, trips, saves, Passport, social presence and preferences. We revoke the Sign in with Apple token when Apple supplied a revocable token. Deleting the account does not cancel an Apple subscription. Use Apple’s subscription management before or after deletion. Access ends immediately after deletion. Purchase records stay only as long as tax law requires, detached from the deleted profile. Can’t sign in? Email hello@wherehotboysgo.com from the address you joined with and we delete everything within 30 days.

Retention

• Your account, plans, saved events, Passport and push devices: while your account exists, then deleted when the account closes, subject to short operational backups.
• Consent records: three years after a withdrawal or deletion, as orphan ids.
• Who’s Going marks and waves: 14 days after the event. Reports: two years after resolution. Blocks: while either account exists.
• Purchase records: as long as tax law requires, with your account detached.
• Messages to hello@ and the contact form: two years after the last message in the conversation.
• Server logs: up to 30 days.

Children

The site is not aimed at children. We do not knowingly collect data from anyone under 16; if we learn we have, we delete it.