Member Dashboard Privacy Notice
This notice explains what personal data the Run to Sip member dashboard collects, why, and what rights you have over it. It covers this app specifically — the runtosip.com store (hosted on Shopify) has its own Privacy Policy, linked in the footer below, which this notice does not replace.
1. Who controls your data
Asociația Run to Sip, a Romanian non-profit association, CIF 53165824, registered office Aleea Vergului nr. 2, bl. 16, sc. A, et. 7, ap. 27, Sector 2, București. Contact: contact@runtosip.com. A dedicated Data Protection Officer has not yet been designated.
2. What we collect
When you register or use the dashboard, we process:
- Your name, date of birth, and sex (incl. non-binary) — required to register.
- Email and phone number — required, used for login, confirmations, and reaching you.
- Country (required) and city (optional).
- Your Telegram account ID — used to let you log in with Telegram, with no password.
- Your check-in / attendance history — which runs you came to, when, and how you checked in.
- Your Sips points, streak, badges, and rank — computed from your attendance.
- A profile photo, if you choose to upload one.
- An opaque check-in QR code we generate for you — it identifies your membership at the door, not your identity to anyone who sees it.
Because of Romanian law, we do not register members under 16 without verified parental consent — the registration form checks your date of birth for this.
3. Why we process it, and on what basis
- To run your membership (check-ins, points, badges, leaderboard) — necessary to provide the service you signed up for (contract/consent).
- To let you log in via Telegram, without storing a password.
- To contact you about your account, a check-in issue, or (only if you opt in) event news — legitimate interest / consent.
- To meet legal obligations — e.g. responding to a data access or erasure request.
Event announcements are sent only if you opt in at registration, and you can turn them off any time from the dashboard's Notifications panel. There is no email newsletter today — notifications are currently delivered through the Telegram bot only.
4. Who else sees it
We use a small number of processors to run this app — none of them may use your data for their own purposes:
| Processor | What it does |
|---|---|
| Supabase | Hosts the dashboard's database (your profile, check-ins, points). |
| Resend | Sends confirmation and account emails on our behalf. |
| Telegram | Provides the login widget and delivers bot notifications. Telegram is a separate data controller for its own platform — see Telegram's own privacy policy for how it handles your Telegram account. |
| Cloudflare | Hosts and serves this website. |
A scan of your check-in QR is only readable by an authorized Run to Sip admin at an event — it does not reveal your identity to anyone else who might see the code.
We do not sell your data, and we do not use it for advertising or share it with any analytics or ad network.
5. Cookies and local storage
This app is not tracked by analytics or advertising cookies. It uses two small pieces of browser storage, both strictly necessary to work at all, so — under the ePrivacy rules as implemented in Romania (Law 506/2004) — neither needs your consent:
- A login/session token — keeps you signed in after you log in with Telegram. Without it, you'd have to log in again on every page.
- A theme preference (light/dark mode) — remembers the display you chose.
Neither is used to track you across other sites, and neither is shared with any advertiser.
6. How long we keep it
We keep your data for as long as you're an active member. If you ask us to erase your account, we remove your personal details (name, email, phone, date of birth, city, QR code) immediately and keep only an anonymous record of your attendance dates — so club-wide statistics stay accurate without identifying you.
7. Your rights
Under GDPR, you can at any time:
- Access a copy of your data — use "Request your data" at the bottom of your dashboard, or email us.
- Correct inaccurate data — most fields are editable from your profile; for anything else, contact us.
- Erase your account — message the bot or email us and we'll remove your personal details.
- Object to processing based on legitimate interest, or withdraw consent for optional notifications, any time.
To exercise any of these, email contact@runtosip.com or message us on Telegram. You can also complain to Romania's data protection authority, ANSPDCP (dataprotection.ro), at any time.
8. Changes to this notice
If how the dashboard handles your data changes meaningfully, we'll update this page and change the date at the top.