Privacy policy

Who we are

Iftaring (iftaring.com) is a volunteer community project based in Barcelona, Spain, that connects hosts and guests for Iftar meals. You can reach us at admin@iftaring.com.

What we collect

Account data you give us: name, email, password (stored hashed), year of birth, bio, photo, spoken languages, phone (optional) and home address (optional).

Activity on the platform: Iftars you publish, requests you send or receive, reviews and photos, notifications, and the language you prefer.

Technical data needed to run the service: session cookies, and server logs with IP addresses kept for a short period for security.

How we use it

To run the service: show your public profile, match hosts and guests, send transactional emails (verification, requests, acceptances, reviews).

To keep the community safe: verified emails, reviews, and the ability to block or remove accounts that break the rules.

With your consent only: occasional news about Iftaring. You can opt out at any time in your settings or via the link in each email.

What others see

Your public profile shows your first name, last-name initial, photo, bio, age, district and city, languages, rating and reviews.

Your exact address is shown only to guests whose request you accepted. Guests' exact addresses are never shown.

Who we share it with

Service providers that process data on our behalf: hosting (DigitalOcean, EU region), transactional email, error monitoring and map/address lookup. We do not sell personal data.

How long we keep it

For as long as your account exists. You can delete your account from your settings or by emailing us; we remove personal data within 30 days, except where the law requires us to keep it longer.

Your rights

Under the GDPR you can access, correct, export or delete your data, and object to or restrict processing. Email admin@iftaring.com. You can also complain to the Spanish data protection authority (AEPD).

Cookies

We use only strictly necessary cookies: a session cookie to keep you logged in and a CSRF token to protect forms. No advertising or tracking cookies.