Privacy Policy

This policy explains what Local Draw (“we”, “us”) collects, why, and what your choices are. We've tried to describe what actually happens rather than hide behind boilerplate.

1. What we collect

If you list as a host: your email address (used to sign you in and to forward enquiries to you), your name or act name, the description and details you write, photos and video links you add, the town or city you work from and its approximate coordinates, your fees, and — kept private — your phone number.

If you contact a host through the site: your name, email, phone (if you give it), the event date, and your message. This is forwarded to the host you contacted.

If you leave a review: your name, your email (used only for verification and never shown publicly), your star rating, and your review text.

If you use the contact form: your name, email, subject, and message.

Automatically, for security and anti-spam: your IP address, browser user-agent, and timestamps. We do not run advertising or analytics trackers.

2. Photos

When you upload a photo we re-encode it and strip its embedded metadata, including any GPS location, before storing it. We never keep the original file. Videos are never uploaded — you paste a link and we embed it.

3. Cookies

We use two cookies, both strictly necessary:

• ld_sess — keeps you signed in. It's HttpOnly and holds only an opaque identifier.
• ld_csrf — protects forms against cross-site request forgery.

We set no advertising or analytics cookies. If you play an embedded YouTube or Vimeo video, that provider may set its own cookies (we use their privacy-enhanced “no-cookie” embeds where possible). If bot protection is enabled, Cloudflare Turnstile may set a cookie to tell humans from bots.

4. How we use your information

To run the directory, forward enquiries to hosts, sign you in, moderate content, prevent spam and abuse, and respond when you contact us. That's the full list.

5. Who we share it with

We do not sell your data. We share it only with the service providers that make Local Draw work:

• Resend — delivers our emails (sign-in links, enquiry forwarding, review requests).
• OVHcloud — hosts the server.
• YouTube / Vimeo — only for videos you choose to embed.

And, by design, when a venue contacts a host, that enquiry — including the venue's email — is forwarded to the host it was sent to.

6. What's public and what isn't

A published host profile is public: name, description, photos, videos, game types, fees, and general area. Never public: a host's email and phone number, and a reviewer's email address.

7. How long we keep it

Sign-in sessions and one-time login/review tokens are deleted automatically once they expire. Profiles, enquiries, and reviews are kept until you ask us to remove them or your account is deleted.

8. Your choices and rights

You can ask us to show you what we hold, correct it, or delete it. Just contact us and we'll take care of it.

9. Children

Local Draw is not intended for anyone under 18, and we don't knowingly collect information from them.

10. Changes

If we change this policy in a meaningful way, we'll update the date above and take reasonable steps to note it.

11. Contact

Questions about your privacy, or want your data removed? Reach us through the contact form.