Privacy

hitPDX stores your email and linked sign-in methods, sessions, saved events and venues, filters, preferences and private calendar subscriptions. Passkeys store public keys; your device keeps the private keys.

We record event views, clicks, saves, hides and filter choices to personalize recommendations. Detailed ranking telemetry expires after 180 days. Your settings, saves and derived preferences remain until you clear them or delete your account. Account prompt impressions, hides and sign-ins are measured separately from event engagement.

Guests save to an account accessible through this browser’s cookie. Guest access expires after 30 idle days. Clearing cookies loses access. Signing in merges this browser’s data with your account; newer event marks win, existing account settings and default filter sets take precedence.

Plunk processes sign-in emails. Google and Apple process authentication when you choose those methods. Apple’s hidden email address may create a separate account from your usual address; link another provider in Account to use it with that account.

In the iPhone and Android apps, “Near me” uses your approximate location on your device only; it is never sent to hitPDX. Reminders are scheduled on your phone. “Calendar app” opens your phone’s own add-event screen; hitPDX cannot read your calendar. If you turn on cancellation alerts, we store your device’s push token with your account until you turn them off, and Apple (APNs) or Google (Firebase Cloud Messaging) delivers the alerts. The iPhone app keeps a random recovery code for your guest account in the iOS Keychain so a reinstall gets your guest back; it survives deleting the app, works only for guests, and is deleted when you sign in to an account.

Calendar subscription URLs are private bearer links. Anyone with your URL can read your saved calendar; reset or disable it in Account to revoke access.

You can export your data, revoke browser sessions, change your email, unlink providers, remove passkeys or delete your account in Account. Deletion requires a fresh email code and removes your account, saves, subscriptions and attributed ranking history from the live database. Operational backups, if retained by the host, expire under the host’s backup schedule.