Privacy Policy

This policy explains what personal data Half Baked Ideas collects, why, and your rights over it. The data controller is Mr Matthew Barnett, registered with the UK Information Commissioner's Office (ICO), registration reference ZB520263. For any privacy question or request, contact mat@typomania.technology.

What we collect

Account details — your name, email address (stored encrypted), and a password (stored only as a secure hash, never in plain text).
Things you create — events, RSVPs, connections to other people, and messages you send.
Technical data — your IP address and browser/device information, and (if you use a mobile app) a push-notification token. We log when transactional emails are sent to you.
Why we use it & our legal basis
To provide the service — running events, RSVPs, messaging and connections (basis: performance of our contract with you).
Transactional email — email verification, attendance requests and notifications (basis: contract).
Security & abuse prevention — e.g. per-IP rate limiting to stop spam and abuse (basis: our legitimate interest in keeping the service safe).
Optional updates — only if you opt in (basis: consent, which you can withdraw at any time).

How it's protected

Your email address is encrypted at rest, passwords are hashed, and all traffic uses HTTPS. We do not use advertising trackers, third-party analytics profiling, or CAPTCHA services — so there's no hidden tracking of you across the web.

Who we share it with

We don't sell your data or share it for advertising. We use a small number of processors purely to run the service: an email delivery provider (to send the emails above) and our hosting provider. Other members only see what you choose to share with them (e.g. your name when you RSVP or connect).

If you've been invited to an event

Someone who already has your contact details — an event organiser — can use Half Baked Ideas to invite you by email. When that happens, we process your name and email address to send you that invitation and let you respond. Our lawful basis is legitimate interests: the organiser's interest in inviting people they already know to a specific event, and ours in providing that, balanced against your privacy. The invitation is about that one event — it isn't marketing. Every invitation has a one-click link to stop further invitations, and you can ask us to delete your details at any time at mat@typomania.technology. If you don't take up the invitation, we remove your details a short while after the event (you can also opt out, or ask us to remove them sooner, at any time).

How long we keep it

We keep your account data for as long as your account exists. Security logs (such as rate-limit counters) are short-lived and expire automatically. You can delete your account yourself at /account/my-data/ (sign in first), or ask us, and we'll remove your personal data, except anything we're required to keep by law.

Your rights

Under UK GDPR you can ask to access, correct, delete, restrict or port your data, or object to processing, and you can withdraw consent at any time. You can also download a copy of your data, or delete your account, yourself at any time — sign in and go to /account/my-data/ — or email mat@typomania.technology. If you're unhappy with how we've handled your data, you can complain to the ICO at ico.org.uk.

Children

Half Baked Ideas isn't intended for children under 16, and we don't knowingly collect their data.

Changes

We'll update this page if our practices change, and revise the date above.