Privacy Policy
We collect the minimum we need to run the Club, we don’t sell your data, and we treat what you tell us with the discretion you’d expect from gentlemen.
What we collect
- Account: email address, display name, city, and date of birth (used solely to verify you are 21+; we store the verification result and acceptance timestamps for the Terms and waiver).
- Gatherings & RSVPs: the events you host and attend, including locations you choose to publish.
- Leads: if you join the mailing list at an event, we store your email, optional phone, city, and the event source, and use them for the welcome email series and nearby-gathering suggestions.
- Location:“Near me” uses your device location once, in your browser, to sort and center the map. It is not stored on our servers.
Sensitive data · a candid note
Fumus et Ratio is a Catholic club, so your participation can imply information about your religious beliefs, a category of sensitive personal data. We handle it accordingly: we collect it only by your explicit, voluntary participation; we minimize what we store; we never sell it, share it with advertisers, or expose it publicly beyond what you yourself choose to publish (e.g., hosting a public gathering). Chapter applications may ask about parish or faith background: those answers go to National only, with your explicit consent at submission.
How we use it
- Running the map of upcoming events and its RSVPs.
- Transactional email (sign-in links, RSVP confirmations, reminders).
- The welcome/onboarding email series (you can unsubscribe anytime).
Who we share with
Service providers only, under contract: Supabase (database & auth), our email provider (transactional email), and our map tile provider. No data brokers. No ad networks.
Your rights
You may request a copy or deletion of your data at any time by contacting National. Deleting your account removes your profile, RSVPs, and lead records; public gatherings you hosted are anonymized.
Retention & security
Data is retained while your account is active. We use encrypted transport (HTTPS), row-level security in the database, and least-privilege access.