Privacy Policy

At Weeknights, we take your privacy seriously. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use weeknights.nl (the "Platform").

We comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws in the European Union and the Netherlands.

1. Who We Are

Weeknights is the data controller responsible for your personal data. You can contact us at:

2. Data We Collect

2.1 Information You Provide

• Account information: Name, email address when you sign up
• Profile information: Profile photo, bio (optional)
• Club information: Club name, description, category, images (for organizers)
• Event information: Event details, pricing, location (for organizers)
• Communications: Messages you send through the Platform
• Payment information: Processed by Stripe; we don't store card details

2.2 Information We Collect Automatically

• Usage data: Pages viewed, features used, time spent on Platform
• Device information: Browser type, operating system, device type
• Location data: General location based on IP address (city-level)
• Cookies: Essential and, with your consent, analytics and advertising cookies (see Section 7)
• Error and diagnostic data: Crash reports and error logs (via Sentry) to keep the Platform working

2.3 Information from Third Parties

• Google Sign-In: Name and email if you sign in with Google
• Stripe: Payment confirmation and payout information for organizers

3. How We Use Your Data

We use your personal data for the following purposes:

4. How We Share Your Data

We share your data only when necessary:

• With organizers: When you book an event, organizers see your name and email to manage attendance
• With attendees: Organizers' contact information may be shared with attendees for event coordination
• Service providers:
  • Stripe (payment processing)
  • Supabase (database hosting)
  • Vercel (website hosting and, with your consent, web analytics)
  • PostHog (analytics, only with your consent)
  • Resend (email delivery)
  • Google (Ads conversion measurement — only with your consent, via Consent Mode v2; Google Maps for displaying event locations; Google Sign-In)
  • Cloudflare (image and media storage and delivery — profile photos and club images)
  • Sentry (error monitoring; session replay only with your consent)
• Legal requirements: If required by law or to protect our rights

We do not sell your personal data to third parties.

5. Data Retention

We keep your data only as long as necessary:

• Account data: Until you delete your account
• Booking records: 7 years (for tax and legal compliance)
• Analytics data: 26 months
• Marketing preferences: Until you unsubscribe

When you delete your account, we remove your personal data within 30 days, except where we need to retain it for legal purposes.

6. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interest
• Withdraw consent: Withdraw consent at any time (for consent-based processing)

To exercise these rights, email us at hello@weeknights.nl. We'll respond within 30 days.

To request a copy or export of your data, email us at hello@weeknights.nl from the email address on your account. We'll provide your data in a machine-readable format within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl

7. Cookies

On your first visit we show a consent banner. Non-essential cookies and trackers only run after you choose "Accept all". Your choice is stored for 12 months, and you can change it at any time via "Cookie settings" in the footer.

Essential Cookies

Required for the Platform to function — no consent needed. These include:

• Authentication cookies (keeping you signed in)
• Security cookies (preventing fraud)
• Your city preference (weeknights_city)
• Your cookie choice itself (weeknights_consent)

Analytics (only with your consent)

Help us understand how people use Weeknights. We use:

• PostHog (privacy-friendly analytics, EU-hosted)
• Vercel Analytics (aggregate page metrics)
• Sentry session replay (anonymized recordings of how the Platform is used, with text and media masked)

Advertising (only with your consent)

We use Google Ads conversion cookies to measure whether our ads work. These are denied by default via Google Consent Mode v2 — unless you accept, Google receives only aggregated, cookieless signals.

8. Data Security

We take security seriously and implement appropriate measures to protect your data:

• All data is transmitted over HTTPS (encrypted)
• Passwords are hashed and never stored in plain text
• Payment data is handled by Stripe (PCI-DSS compliant)
• Regular security reviews and updates
• Access to personal data is limited to authorized personnel

9. International Transfers

Your data is primarily stored in the European Union. Some of our service providers (such as Vercel, Google, Sentry, and Cloudflare) may process data in the United States. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or certification under the EU–U.S. Data Privacy Framework.

10. Children's Privacy

Weeknights is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@weeknights.nl.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes via email or through the Platform. The "Last updated" date at the top shows when the policy was last revised.

12. Contact Us

For any questions about this Privacy Policy or your personal data, contact us at: