Jalapengyou
AboutSign in

Privacy Policy

Last updated: May 7, 2026

1. Who we are

Jalapengyou (“we,” “us,” or “our”) is a web application for community groups to organize recurring meetups and manage RSVPs. It is operated as a personal project. Questions about this policy can be sent to privacy@jalapengyou.com.

2. Information we collect

We collect only what is necessary to provide the service:

  • Email address: used for authentication (magic-link sign-in), event reminders, and group invitations. We never store a password.
  • Display name: optional; shown to other members in groups you join.
  • Discord user ID and username: only if you choose to link your Discord account. Used to send RSVP confirmations and reminders via Discord DM.
  • Group membership and RSVP data: which groups you belong to, your role (member or admin), and your RSVP responses to events.
  • Session identifier: a random token stored in an HttpOnly cookie used to keep you signed in. It is never used for cross-site tracking.

We do not collect payment information, location data, phone numbers, or any information not listed above.

3. How we use your information

  • Authenticating you when you sign in via magic link.
  • Sending event reminders and invitations you have opted into.
  • Displaying your name and membership status to other members of groups you belong to.
  • Delivering RSVP confirmations and reminders via Discord DM if you have linked your Discord account.
  • Aggregate, anonymous analytics to understand how the service is used.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-party services

We use the following processors to operate the service:

  • Neon: Postgres database hosting. Data is stored in the US-East-1 region (AWS). See Neon’s Privacy Policy.
  • Resend: transactional email delivery. Your email address is transmitted to Resend when we send you a magic link, reminder, or invitation. See Resend’s Privacy Policy.
  • Vercel: web hosting and serverless functions. See Vercel’s Privacy Policy.
  • Discord: only if you link your Discord account. We store your Discord user ID and username. RSVP and reminder messages are delivered via Discord REST API. See Discord’s Privacy Policy.
  • Vercel Analytics: cookieless, privacy-first analytics. No personal data or device identifiers are collected. See Vercel Analytics Privacy.
  • Sentry: error monitoring. Error reports may include anonymized request metadata (URL, browser type) but not your personal data or message content. See Sentry’s Privacy Policy.

5. Cookies and sessions

We set one cookie: a session HttpOnly cookie that keeps you signed in for up to 30 days. It is renewed on each visit. It is not a tracking cookie and is not readable by JavaScript.

We do not use advertising cookies, fingerprinting, or cross-site tracking. Vercel Analytics uses no cookies.

6. Data retention

Your data is retained as long as your account is active. You can delete your account at any time via Settings → Delete Account. Deletion removes your email, display name, Discord link, group memberships, RSVPs, and session. Data associated with groups you created is handled per the group deletion flow.

7. Your rights

You have the right to access, correct, or delete your personal data. Email privacy@jalapengyou.com with any request. For deletion, using the in-app account deletion flow is the fastest path.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and to opt out of its “sale” (we do not sell personal information).

8. Children

Jalapengyou is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe we have inadvertently collected such information, contact privacy@jalapengyou.com.

9. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page reflects the most recent revision. For material changes, we will make reasonable efforts to notify active users via email before the changes take effect.

10. Governing law

This policy is governed by the laws of the State of California, without regard to its conflict of law provisions.

11. Contact

For privacy-related questions or requests: privacy@jalapengyou.com.