Privacy Policy

ksara (ksaraevents.com) is operated from Belgium. For anything privacy-related, contact labenne.sam@gmail.com.

• Account data: email address, password (stored hashed by our auth provider), username, optional full name and profile picture.
• Content you create: events (title, description, time, location and its map coordinates, cover image), RSVPs, friend connections, and invites.
• Technical data: our hosting providers keep standard server logs (IP address, browser type) to run and secure the service.

We do not run advertising or sell personal data — to anyone.

To provide the service you signed up for (showing events, RSVPs, and profiles to the right people), to send the notification emails you can switch off in Settings, and to keep the platform secure. Legal bases under the GDPR: performance of contract (art. 6(1)(b)) and our legitimate interest in running a secure service (art. 6(1)(f)).

These providers process data on our behalf:

• Supabase — database, authentication, and file storage (EU-hosted project).
• Vercel — application hosting.
• Resend — sends notification emails.
• Google Maps — loads when you view or pick an event location; Google may process your IP address under Google's privacy policy.

ksara uses only strictly necessary cookies: the session cookies that keep you signed in. There are no advertising or analytics cookies, which is why we don't ask for cookie consent — these cookies are exempt under the ePrivacy rules.

As long as your account exists. Deleting your account (Settings → Danger zone) permanently removes your profile, events, images, RSVPs, friendships, and invites. Server logs rotate automatically.

You can access, correct, export, or delete your personal data, and object to or restrict processing. Most of it is self-service: correct your data on the profile page and delete everything in Settings. For anything else, email labenne.sam@gmail.com. You also have the right to complain to your data protection authority — in Belgium, the GBA/APD (dataprotectionauthority.be).

If this policy changes materially we'll note it here with a new effective date.