Privacy policy
Last updated 8 October 2026
See You At (seeyouat.dev) is a free directory of tech conferences where you can say you’re going and see who else is. This page explains which personal data we handle, why, and what you can do about it, as required by the EU General Data Protection Regulation (GDPR).
Who is responsible
The data controller is Federico Bagato, Padua, 35010, Italy. For anything about your data, write to privacy@seeyouat.dev.
What we collect and why
- Your account. When you sign in with GitHub, Google or Apple, the provider sends us your name, email address, profile picture and an account id; with GitHub, also your username. With an email link, we only get your address. We use them to create your account and keep you signed in. Legal basis: providing the service you asked for (art. 6(1)(b) GDPR).
- GitHub profile, to fill in yours. With GitHub, we read your public GitHub bio, location and social links once, to suggest them in your See You At profile. Nothing is saved until you confirm. We keep the access token GitHub gives us for this; it only reads public profile data.
- Your profile. What you choose to add: name, bio, links (LinkedIn, X, Bluesky, website), interests, and the country and city you’re based in. Basis: providing the service (art. 6(1)(b)).
- Events you’re going to. Each “I’m going” is saved with the date you added it. Basis: providing the service (art. 6(1)(b)).
- Sessions and security. For each sign-in we store a session with its expiry, your IP address and browser user agent, to keep you signed in and spot misuse. Our host also keeps short technical logs of requests. Basis: our legitimate interest in running a secure service (art. 6(1)(f)).
- Usage analytics. Which pages and features are used, so we can improve them. See Analytics.
- Emails. We only email you the sign-in links you request. No newsletters, no marketing.
We don’t sell your data, show ads, or make automated decisions about you.
Who can see it
If your profile is public, your name, picture, bio, links and the events you’re going to appear on your profile page (seeyouat.dev/u/…) and next to those events in “Who’s going”. Anyone can see them, signed in or not. We ask search engines not to index profile pages, but we can’t guarantee every crawler follows that.
Your email, country, city and IP address are never shown. Without GitHub, your profile becomes public only once you add a LinkedIn link and turn visibility on. A private profile is visible only to you; event counts include you without naming you. You can switch at any time from your profile.
Your location
We only use the country and city you type in, to show how far events are from you. We never ask your device for its location. Without a city we use the country’s capital.
Analytics
We use PostHog, hosted in the EU (Frankfurt), to count page views and actions such as opening an event, searching or saying you’re going. Error reports are sent there too.
- Without your consent (the default), PostHog stores nothing on your device: its id lives in memory and is gone when you close or reload the page. No session recording.
- With your consent, PostHog keeps an anonymous id in a cookie and in local storage so visits can be linked over time, and may record sessions (clicks, scrolls and page changes, with typed text masked). Basis: consent (art. 6(1)(a) GDPR and the ePrivacy rules).
- When you’re signed in, our server also records account events (sign-up, sign-in, saved events, profile changes, account deletion) under your account id, with your interests, country and profile visibility. Never your links, city or email. Basis: legitimate interest in understanding how the service is used (art. 6(1)(f)); you can object by writing to us.
Services we rely on
These providers process data on our behalf, under data processing agreements:
- Vercel (hosting and request logs), United States.
- Neon (database), servers in Frankfurt, Germany.
- PostHog (analytics), servers in Frankfurt, Germany.
- Resend (sign-in emails), United States.
GitHub, Google and Apple handle your sign-in under their own privacy policies. Transfers to the United States rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
How long we keep it
- Account, profile and saved events: until you delete your account.
- Sessions: until they expire or you sign out. Sign-in links: 10 minutes, single use.
- Analytics events: up to [N] months. After you delete your account, the ones tied to your account id can no longer be linked to you.
Your rights
You can access, correct, export or delete your data, restrict or object to how we use it, and withdraw consent at any time without affecting what happened before. Most of this you can do yourself from your profile: deleting your account removes your account, profile, saved events, sessions and linked sign-in providers at once. For the rest, write to privacy@seeyouat.dev; we reply within one month.
You can also complain to a data protection authority, in Italy the Garante per la protezione dei dati personali, or the one where you live.
Where event information comes from
Event listings are public information about conferences, not about you. AI agents find them on organisers’ websites and draft each listing; a person reviews every one before it is published. See the terms for more.
Age
See You At is not meant for people under 16. If you are under 16, please don’t create an account.
Changes
If we change this policy, we update the date at the top. If a change affects how we use data you already gave us, we’ll tell you on the site before it applies.
Credits
Country and city data from GeoNames, licensed under CC BY 4.0.