Privacy and your listing
Nearby Artists is operated by Peter Mueller. For access, correction, deletion, privacy questions or a suspected security issue, contact hello@nearbyartists.org.
We do not sell personal information, run advertising, use behavioral tracking, or use listing emails for newsletters or marketing.
What we collect and why
We collect the profile details you submit, your private email, your choice about publishing contact information, and confirmation that you are 18 or older and want an approved public listing. ZIP codes place listings in a local region; they are not displayed on profiles. We do not ask for your birth date or identity documents.
Your private email is used to verify a listing, send secure update and removal links, notify you when your listing is published, and deliver directory messages if you enable them. Messages, reports and moderation records help us relay contact and respond to abuse. Technical logs and delivery outcomes help secure and operate the service.
What is public
Approved listing names, city or town, introductions, creative interests, invitations and public links are available to anyone and may appear in search engines. An email address appears publicly only if you explicitly choose to publish one. Public information can be copied by others, and we cannot remove copies from other websites or search caches.
Approved feedback and event notices are public. Event organizers choose whether to publish the exact meeting location; RSVP-only locations stay off public pages and flyers. Do not put a private address or someone else's private information into public free-text fields.
Who can access private information
The operator can review submissions, private emails, message records and abuse reports. Private message relays do not disclose either member's private address to the other member.
Our service providers include Hetzner (website hosting), Resend (outbound email), and Namecheap (domain and inbound email forwarding). Operator correspondence and alerts are handled in Gmail. Google is used for operator sign-in when configured; artists do not need a Google account. Providers process information needed for their services under their applicable terms and may retain their own delivery, security or correspondence records beyond our application retention periods. Information is handled on our hosting infrastructure and provider systems, which may process it in the United States and other countries.
We may disclose information when legally required or reasonably necessary to address abuse or protect someone's safety. We limit access to what is needed for that purpose.
Updates, removal and other requests
Use update your listing to receive a secure link for edits or removal. Your approved profile stays visible while proposed edits await review. Removal deletes your listing, pending edits, access tokens and ordinary related message records from active storage. Evidence associated with an abuse report can remain for the limited safety period below.
Email hello@nearbyartists.org to request a copy, correction or deletion of other information we hold about you, or if you no longer control your listing email. We verify requests using control of the relevant email or other information already held, and avoid requesting extra identity information. We aim to acknowledge requests within seven days and resolve them within thirty days, subject to any different legal deadline or necessary verification. We explain any information that must be retained.
What we retain and for how long
- Published listings: until removed. Unverified listings: 30 days after their last update. Other unpublished listings and verified pending edits: 90 days after their last update. Unverified proposed edits: 30 days.
- Ordinary private messages: 90 days, or earlier when an associated listing is removed. Abuse reports and their related message evidence: up to one year after creation or review.
- Unverified events: 30 days. Hidden or rejected events and unpublished feedback: 90 days after their last update. Published events retain their URLs so printed QR links continue to work; contact us for removal of personal details. Published feedback remains until removed or a verified privacy request is resolved.
- Secure links expire after one hour; operator login links expire after ten minutes. Expired or used access-token records are removed within seven days after expiry or use. Operator sessions last up to eight hours.
- Our application’s email delivery records: 30 days; they contain purpose and status, not addresses or message contents. Signup audit files: up to 30 days and approximately 10 MiB. Website access logs use daily rotation with fourteen archives; host service/security journals follow the server's separate operational retention.
- Privacy deletion records contain only an internal reference, deletion scope and date, and are retained for 120 days so deleted data is not accidentally restored.
- Routine database backups: 14 days. Deployment and historical backups: up to 90 days. Deleted details can remain in restricted backups until expiry. Restoring a backup requires reapplying recorded privacy deletions before returning it to service.
Automated cleanup runs daily. Records specifically required for a legal preservation duty may be handled separately, with the reason and review date documented.
Security and cookies
We use HTTPS, restricted server access, private file permissions, expiring links and administrative access controls. Operator sign-in uses necessary security cookies. We do not use advertising or analytics cookies. No system can guarantee absolute security; report suspected unauthorized access to hello@nearbyartists.org.
Changes to this notice
We update the effective date when this notice changes. Material changes to information use will be explained on the site and, where appropriate, by email before the new use begins.