Privacy Policy

Introduction

This Privacy Policy explains how LaserPortal.fun processes personal data when visitors browse public event pages, create accounts, manage arenas or organizers, submit event information, or use administration tools.

We process data for operating the event portal, protecting accounts, managing public records, complying with legal obligations, and, with consent, understanding use of public pages.

Data we collect

Account data may include email address, password hash, preferred locale, account status, global role, entity manager roles, login history, consent records, and notification or filter preferences.

Event and entity data may include arena or organizer names, contact emails, phone numbers, addresses, map links, photos, event descriptions, schedules, capacity status, age limits, prices, and external registration links.

Technical data may include IP address, user agent, session identifiers, security logs, cookie values for locale and filters, and timestamps for creating, updating, deleting, publishing, or restoring records.

How we use data

We use the data to display public events, remember user preferences, authenticate accounts, authorize administrators and entity managers, maintain audit logs, process queued AI text submissions, troubleshoot service reliability, and, with consent, measure use of public pages.

We do not use the portal for advertising profiling and we do not sell or rent personal data.

Cookies and local preferences

The portal uses technical cookies for session handling, locale selection, CSRF protection, and remembering the last public event filters for anonymous visitors.

Logged-in users may have their public filter preferences stored in the database so the same choices can be restored during later visits.

If you allow analytics, Google Analytics receives information about your visits to public pages and may set analytics cookies. The choice is stored locally in your browser. You can reject or withdraw consent at any time through Analytics settings in the footer. No Google Analytics tag loads before consent.

Data sharing

Public event and entity records are visible to visitors after publication. Administration records are available only to authorized administrators and entity managers according to their roles.

Data may be processed by trusted hosting, infrastructure, backup, email, map, or diagnostic providers only as needed to operate the service. External booking or registration pages are controlled by their own operators.

Opening /arenas directly lazy-loads Google My Maps. The browser connects to Google, which may receive the visitor's IP address and technical browser or device data; Google's privacy terms apply. The no-referrer policy limits disclosure of the LaserPortal.fun page URL, but it does not hide the IP address or prevent Google's processing.

Retention

Active account, entity, and event records are kept while they are needed to operate the service. Deleted or inactive records may be retained in audit logs or backups for security, recovery, legal, and fraud-prevention purposes.

Technical logs and backups are kept for a limited operational period and then deleted or overwritten according to the hosting and maintenance process.

Security

We use password hashing, role-based access controls, CSRF protection, session security settings, and parameterized database queries to protect the portal.

No online service can be guaranteed completely secure. Users and managers must keep their credentials confidential and use administration access responsibly.

Your rights

Depending on applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, export, or information about how data is processed.

Some records may need to be retained where required for security, audit, legal obligations, or dispute resolution.

Updates and contact

This policy may be updated when the service, data processing, or legal requirements change. Material changes will be reflected on this page.

Privacy questions and data requests can be sent to the contact email below.