Privacy Policy

This Policy applies to everyone who uses the Service, including people who create an account to organize events (“Hosts”) and people who respond to an event through its invite link without an account (“Guests”).

This Policy does not apply to websites or services operated by others, including map and calendar services you choose to open from the Service. Your use of those services is governed by their own privacy policies.

Account information. When a Host creates an account, we collect the email address and name provided, together with a password. Passwords are stored by our authentication provider only in hashed form and cannot be read back by anyone, including us. We also record when the account was created, whether its email address has been confirmed, when it last signed in, and whether it has been suspended.

Event information. When a Host creates or manages an event, we collect the information entered, including the event name, notes, start time, proposed dates, chosen date, location, answer-by date, the town or ZIP code given for the weather forecast, voting status, ride assignments, and any comments the Host posts.

Guest information. When a Guest joins an event, we collect the name entered (a first name and a last name or initial); the Guest's availability responses; the number of additional people the Guest is bringing; any offer to drive (including the number of seats and the place of departure), to host or to bring items; any note; and any comments posted. Guests are not asked for an email address and do not create an account.

Reports. When a Guest or Host reports a comment or an event, we collect the reason selected, any note provided, the item reported, and which participant on that event submitted the report.

Security and abuse-prevention information. To protect the Service against abuse, we count sign-in attempts, registrations, emails sent, events created, event joins, comments, reports and similar actions per IP address, per email address and per account. Counts kept per IP address or email address are stored under a one-way cryptographic hash rather than the address itself. All such counts are deleted automatically after a short period. Our hosting and authentication providers may also keep short-lived security and server logs, which can include IP addresses and browser information.

Information we do not collect. The Service does not use analytics, advertising or tracking technologies, does not request your location, and does not collect payment information.

We use the information described above only to:

• provide, operate and maintain the Service, including displaying events to the people invited to them;
• create and secure accounts, confirm email addresses and process password resets;
• send account-related emails, such as email-address confirmation and password-reset messages;
• detect, investigate and prevent abuse, fraud, spam and security incidents, and enforce our Terms of Service;
• review and act on reports; and
• comply with applicable law and respond to lawful requests.

We do not send marketing email, and we do not use your information to build advertising profiles.

Anyone with an invite link. Information entered on an event, including names, responses, offers, notes, ride assignments and comments, is visible to anyone who has that event's invite link, including the Host and every Guest. Invite links should be shared only with intended participants.

Private links. The Host's private link and each Guest's personal link allow changes to be made. Anyone who obtains one of these links can act through it, so they should be kept confidential.

Link previews. When an invite link is posted in a messaging application or social network, that service may display a preview showing the event's name and its chosen date or number of proposed dates to everyone who can see the message.

Email addresses. A Host's email address is never displayed to Guests or to other Hosts.

The operator. The operator of Rain Check can access events, account email addresses and reports in order to run the Service, resolve problems and address abuse. Reports are seen only by the operator; no participant on the event is told that a report was made or who submitted it.

Service providers. We disclose information to the following providers solely so that they can operate the Service on our behalf, under their own terms and data-protection commitments:

Legal requirements. We may disclose information where we believe in good faith that disclosure is required by law, regulation or legal process, or is necessary to protect the rights, property or safety of Rain Check, our users or the public.

Transfers. If the Service is transferred to another operator, information may be transferred as part of that transaction, subject to this Policy.

No sale. We do not sell personal information and do not share it for cross-context behavioral advertising.

The Service uses only cookies that are necessary for it to function or that remember a setting you choose:

• sign-in cookies, set when a Host signs in, which keep the Host signed in;
• one cookie for each event a Guest joins, which allows that device to recognize the Guest on return visits; and
• a cookie set only if you select “Pause animations,” which remembers that choice on that device and contains no other information.

These cookies cannot be read by scripts running on the page.

When a Guest joins an event, the Guest's browser also stores the name entered in its local storage, so that the next invitation opened on the same device is pre-filled. This information remains on the device and is never transmitted to us. It is removed by selecting “Not you?” or by clearing the browser's site data.

We do not use advertising, analytics or other tracking cookies.

We retain information only for as long as it is needed for the purposes described in this Policy:

• events, including all responses and comments, until the Host deletes the event or the Host's account, or until we remove it under our Terms of Service;
• accounts, until deleted by the account holder or removed by us under our Terms of Service;
• reports, until the reported comment or event is deleted;
• Guest information, until the Guest leaves the event, the Host removes the Guest, or the event is deleted; and
• abuse-prevention counts, for a short period, after which they are deleted automatically.

Deletions take effect in our database immediately. Copies may persist for a limited time in backups or logs maintained by our service providers before being overwritten in the ordinary course.

Guests. A Guest may change their name, responses and offers at any time through the invite link or their personal link. Selecting “Remove me from this event” deletes the Guest's name, responses and comments from that event, and any individual comment may be deleted on its own.

Hosts. A Host may edit or delete an event, remove a Guest or delete any comment from the event's host page.

Account deletion. Any account holder may delete their account from the account page. Deleting an account immediately and permanently deletes the account and every event it hosts.

Additional rights. Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal information, or to object to certain processing. You may exercise most of these rights directly through the tools described above. We will not discriminate against you for exercising any of these rights.

We use reasonable technical and organizational measures to protect information, including encrypted connections (HTTPS), cookies that page scripts cannot access, hashed passwords, database access controls and rate limits. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from them. If you believe that a child under 13 has provided information through the Service, that information may be deleted using the tools described in Section 8, or the Host of the relevant event may be asked to remove it.

Our service providers may store and process information in the United States and in other countries where they operate. By using the Service, you acknowledge that your information may be processed outside the country in which you live.

We may update this Policy from time to time. When we do, we will revise the date shown at the top of this page. Your continued use of the Service after an update takes effect constitutes acceptance of the revised Policy.

Questions, requests and notices concerning this document may be sent by email to contact@nomorerainchecks.com.