Privacy Policy

ConHaven (“we,” “our,” or “us”) is operated by the site owner as the data controller for this website. This policy explains what personal information we collect, why we collect it, who we share it with, and the rights you have over it.

Questions about this policy or your data should be sent through our contact page.

• Account information: if you create an account, your email address and authentication data.
• Contact form submissions: your name, email (if provided), and message content when you use our contact form.
• Technical data: IP address, browser type, device information, and pages visited, collected automatically via cookies and standard server logs.
• Payment metadata: if you subscribe to a paid tier, Stripe (our payment processor) shares limited billing metadata with us, such as subscription status and transaction history. We never see or store your raw card number— payment is handled entirely through Stripe Checkout, so full card data never touches our servers.
• Local favorites: saved convention favorites may be stored locally in your browser.

We use Google Tag Manager (GTM) to load Google Analytics 4 (GA4), which sets cookies and collects usage analytics (pages visited, general traffic patterns, and event interactions) to help us understand how the site is used and improve it. GTM/GA4 data is processed by Google in accordance with Google's Privacy Policy. We also use Cloudflare Turnstile on our contact form to help distinguish humans from bots; Turnstile may process limited technical signals (such as IP address and browser characteristics) for that purpose only.

We rely on the following third-party service providers (subprocessors) to operate ConHaven. Each processes data only as needed to provide its service to us:

• Supabase — database hosting and (planned) authentication for account data.
• Vercel — application hosting and infrastructure.
• Cloudflare (Turnstile) — bot and spam protection on our contact form.
• Google (Tag Manager / GA4) — website analytics.
• Stripe — payment processing and subscription billing.

• Contract performance: to create and maintain your account and provide services you've subscribed to.
• Legitimate interests: to operate, secure, and improve the site, respond to inquiries, and prevent abuse.
• Consent: for non-essential analytics cookies, where required by applicable law.
• Legal obligation: to retain payment records for tax and accounting compliance.

• Account data: retained while your account is active.
• After a deletion request: account data is deleted or anonymized within 30 days, except where retention is required below.
• Payment/billing records: retained for 7 years to comply with tax and accounting obligations.
• Contact form submissions: retained only as long as needed to resolve your inquiry, then deleted or archived.

If you are a California resident, you have the right to know what personal information we collect, request deletion of that information, correct inaccurate information, and not be discriminated against for exercising these rights.

Do Not Sell or Share My Personal Information: As of the Effective Date above, ConHaven does not sell personal information and does not share it for cross-context behavioral advertising. We only disclose data to the service providers listed above, strictly to operate the site.

To exercise any California privacy right, contact us through our contact page.

Depending on your location, you may have the right to access, correct, export, or delete your personal data. Until a self-serve privacy dashboard (planned at /account/privacy) is available, you can exercise any of these rights by contacting us through our contact page. We will respond within a reasonable time and verify your identity before fulfilling data requests.