Privacy policy

Hangout (hangoutapp.xyz) is a map-first social planning app: post what you're doing, where and when, and let nearby people join. This page explains what data the app handles, which services process it, and the choices you have.

• Account data — your name, email address, and optional profile details, managed by our sign-in provider Clerk. If you sign in with Google, we receive your basic Google profile (name, email).
• Content you post — hangouts (title, description, meeting location, times), join requests, room messages, friend requests and friendships, and any safety reports or blocks you submit.
• Invite emails — if a host invites someone to a hangout by typing an email address, we store that address with the invite so the host can see who they invited. It is used only to deliver that invite, and it is deleted with the hangout.
• Technical data — IP address and basic request information, processed by our hosting and by Google Maps when the map loads, and included in error reports our monitoring collects when something breaks.
• Device location — only if you grant the browser permission. It is used in your browser to center the map and power the distance filter. We never store it on our servers.

Hangout sets only strictly necessary cookies: the session cookies from Clerk that keep you signed in. We use no analytics cookies, no advertising cookies, and no cross-site tracking of any kind. Your browser's local storage keeps small interface preferences (such as having dismissed the cookie notice) on your device only.

These providers run parts of the app under their own terms:

• Clerk — authentication and account management.
• Google Maps Platform — renders the map and powers place search. When the map loads, Google processes your IP address and map interactions under the Google Privacy Policy.
• Resend — delivers notification emails (join requests, join confirmations, hangout invites, friend requests, changes to hangouts you're part of, and reminders before a hangout you joined starts). For members, your address is fetched from our sign-in provider at send time; we don't store it ourselves (the one exception is invite emails, above).
• Sentry (EU region) — error monitoring; reports can include your IP and browser details.
• Vercel — hosting and request handling.
• Neon — the database storing accounts and content.
• Upstash — rate limiting to protect the service from abuse.

To provide the service you signed up for (accounts, posting, joining, rooms), and to keep it secure and working (rate limiting, error monitoring, abuse reports). We don't sell data, run ads, or share your data with anyone beyond the processors above.

A hangout's exact meeting point is shown only to its host and approved guests. Everyone else — including signed-out visitors — sees an approximate area until they've joined.

Your account and content stay until you delete them or ask us to. Error reports in Sentry expire automatically (90 days). Server logs are short-lived and used only for operations.

You can request access to, correction of, or deletion of your data — including full account deletion — by emailing support@hangoutapp.xyz. If you're in the EU/EEA or UK, these are your GDPR rights; we honor them for everyone regardless of location.

If the app starts using new services or any analytics, this page will be updated first and the cookie notice upgraded to an accept/decline choice where required.