Your data, without the mystery

Searching: your chosen city, interests, dates, and travel distance are used to show matching events. EventDrift does not require an account or keep a readable server-side search history. It temporarily stores matching results under a one-way fingerprint of the search so identical requests can reuse them, and uses a separate one-way network fingerprint to enforce search limits. Raw network addresses are not stored in the discovery database.

AI event discovery: EventDrift sends OpenAI the event description you type and your selected city, date range, travel radius, filters, and sort choice so it can search public web sources for candidate events. EventDrift does not send your email address or raw network address to OpenAI as part of this request. Please do not include personal or sensitive information in your search description.

Cookies and saved events: EventDrift does not currently use analytics or advertising cookies. Events you choose to save are kept in your browser's local storage so the Saved page can work. They are not sent to an EventDrift account or database.

City requests: if you choose to join the list, we collect your email address, requested city or region, country, consent time, and request status. We also create one-way security fingerprints from your email address and, when available, network address to prevent abuse. The raw network address is not stored in the waitlist database.

Audience measurement: EventDrift uses Vercel Web Analytics to understand which pages are useful and how visitors find the site. It measures page views using anonymized, cookie-free data such as the visited route, referring site, approximate country, browser, operating system, and device category. Analytics reports do not include URL query parameters, email addresses, city-request form contents, or raw search terms.

Basic technical records: website hosting and security services may create short-lived logs such as request time, network address, browser information, and errors needed to operate and protect the site.

Search selections are used to answer your request and provide the service. Aggregated audience measurements help us understand whether EventDrift is useful and improve its pages. Essential technical records, audience measurements, and security fingerprints are used for our legitimate interests in improving EventDrift, keeping it reliable, and preventing abuse.

City-request details are used only to measure demand for new locations and email you if EventDrift adds the area. This is based on the consent you give when joining. You may withdraw that consent at any time.

The city-request fields are required only if you want to join that list. You can continue searching and saving events without providing them.

OpenAI provides AI event discovery and web search. It receives the search criteria described above and returns candidate event details and public source links. Read the OpenAI Privacy Policy and OpenAI API data controls.

Vercel provides website hosting, security, and cookie-free Web Analytics. Supabase provides database storage, and Resend delivers city-request confirmation emails. These providers may process information only to provide their services to EventDrift. We may also disclose information where the law requires it. We do not sell personal information.

If a provider processes information outside the European Economic Area, EventDrift will use a lawful transfer mechanism, such as an adequacy decision or approved contractual safeguards. You can contact us for information about the safeguard that applies.

Saved events remain in your browser until you remove them or clear your browser storage.

Cached search results normally expire after 30 minutes. Search rate-limit records are removed after their short abuse-prevention window, and neither record contains the raw search text or raw network address.

EventDrift sends OpenAI API requests with response storage disabled. OpenAI states that API data is not used to train or improve its models unless the API customer explicitly opts in. OpenAI may retain prompts, responses, and related metadata in abuse-monitoring logs for up to 30 days by default, or longer where required by law or reasonably necessary to protect its services or third parties.

Audience measurements are kept in aggregated analytics reports according to Vercel's applicable retention period. EventDrift does not build separate advertising profiles from this data.

City-request details are kept only while we measure demand and may contact you about the location. They are deleted when you withdraw consent, the list closes, or the location decision is complete. Security rate-limit records expire after they are no longer needed to prevent abuse. Hosting logs follow the hosting provider's operational retention period.

Depending on the circumstances, you may ask to access, correct, delete, restrict, or receive a copy of your personal information. You may object to processing based on legitimate interests and withdraw consent without affecting earlier lawful processing.

Use the privacy contact above to make a request. We may need to confirm your identity before acting on it. EventDrift does not use this information for automated decisions that have legal or similarly significant effects on you.

You may also complain to the data protection authority where you live or work, or where you believe a breach happened. In Hungary, this is the National Authority for Data Protection and Freedom of Information.