Privacy notice · Draft
Privacy Policy
Third Cup collects only the information needed to review membership, operate private events, and support member connections.
What we collect
Applications include identity and profile details, contact information, interests, and written responses. Members also create passkeys and session records. Event activity includes RSVPs, waitlist status, attendance, friendship choices, blocks, and reports.
Who can see what
Approved members can view profile information for all members, but email and phone remain hidden unless two members have an accepted friendship. Event details and attendee lists are never public. Administrators can access information needed to operate and moderate the community.
Limited traffic totals
Third Cup keeps first-party daily page-view totals without cookies or visitor identifiers. During a request, the address may be used with a local DB-IP database to determine a country, state or province, and city; the address is immediately discarded. Browser headers are reduced to device, operating-system, browser, and traffic-class categories, and referral URLs are reduced to a hostname. Raw addresses, browser headers, full referral URLs, query strings, coordinates, and individual page paths are not stored. Do Not Track requests and administrator activity are excluded, and no outside analytics service receives this information.
Retention and deletion
Rejected and withdrawn application details, and all photos, are scheduled for deletion after 90 days. If you delete your profile, it will be removed from our production servers within 48 hours, but may be retained in backups. Aggregated city totals are kept for 180 days; other aggregated traffic totals are kept for 400 days. Cities with fewer than five page views in an administrator’s selected reporting period are not shown individually.