Privacy Policy

ElianCodes BV is the data controller for conference-ratings.com. We collect as little as we can, and we don't sell your data. This policy explains what we process and why, in line with the GDPR.

1. What we collect

• Account data — name, email address, and a hashed password (legal basis: contract).
• Ratings & reviews — your scores, review text, attendance year, and optional self-reported role, displayed publicly with your name (legal basis: contract).
• Billing data — handled by our merchant of record, Paddle, which acts as an independent controller for payment data; we receive subscription status, never card numbers (see Paddle's privacy policy).
• Newsletter — your email, only if you subscribe (legal basis: consent; unsubscribe anytime).
• Technical logs — server logs and error reports for security and reliability (legal basis: legitimate interest).

2. Cookies & local storage

By default we use only functional cookies: a session cookie, a CSRF token, and local-storage keys for your theme preference and cookie choice. Google Analytics is loaded only if you explicitly accept it via the cookie banner (legal basis: consent) — decline and nothing is loaded; you can clear your browser storage to be asked again. No advertising or cross-site tracking cookies, ever.

3. Who we share data with

• Paddle — payment processing (merchant of record).
• Mailgun — transactional and newsletter email delivery.
• Sentry — error monitoring (technical data only).
• Google Analytics — aggregate usage statistics, only after you opt in via the cookie banner (IP anonymisation enabled).

We don't sell or rent personal data, ever.

4. Retention

Account data is kept while your account exists. Reviews are part of the public record of the Service; if you delete your account, your reviews are anonymised rather than silently rewriting conference history. Logs rotate on a short schedule.

5. Your rights

Under the GDPR you can request access, correction, deletion, portability, or restriction of your personal data, and object to processing based on legitimate interest. Email hello@conference-ratings.com and we'll respond within 30 days. You can also complain to the Belgian Data Protection Authority (dataprotectionauthority.be).

6. Changes

We'll announce material changes to this policy on the Service or by email.