Privacy Policy
Effective date: June 20, 2026
1. Who we are
Fernhill Community is a private digital gathering space for the Fernhill Ecstatic Dance community, operated by Fernhill Dance LLC (“Fernhill”, “we”, “us”). Contact: hello@fernhilldance.com.
2. What we collect
- Account data: email address, display name / tribe name, pronouns, bio, avatar, social links.
- Community content: posts, comments, direct messages, event RSVPs, board posts, journey entries, mood check-ins.
- Mood / wellbeing data (special category): Mood check-ins you submit are treated as health-adjacent data under GDPR Article 9. We process them solely to power community features you opt into and never share them with third parties.
- Authentication data: magic-link email tokens managed by Supabase Auth.
- Technical data: Core Web Vitals telemetry (page load metrics — no PII), service worker logs, error reports you submit via the bug reporter.
- Payment data: We do not collect card numbers or financial data. Voluntary support is sent directly through Venmo to @fernhill.
3. Why we process it (legal bases)
| Purpose | Legal basis |
|---|---|
| Providing the community platform | Contract (ToS) |
| Authentication & security | Legitimate interest |
| Mood & wellbeing check-ins | Explicit consent |
| Admin digest emails | Legitimate interest |
| Performance telemetry (Web Vitals) | Legitimate interest — no PII |
| Bug reports | Legitimate interest |
4. Third-party processors
- Supabase (US/EU) — database, authentication, realtime, file storage. Privacy policy.
- Render (US) — hosting & compute. Privacy policy.
- Resend (US) — transactional email (magic links, notifications). Privacy policy.
- GoatCounter — privacy-friendly analytics (no cookies, no PII). Privacy policy.
- OpenWeather — weather widget (public location data only, no account data sent).
- Google Calendar API — community events calendar (public event data only).
- Venmo — voluntary community support payments (separate Venmo account; we receive no financial data).
We do not sell your data to any third party.
5. Data retention
- Account data is retained for as long as your account is active.
- Performance telemetry is purged after 90 days.
- Direct messages are stored until you or the conversation participants delete them.
- When your account is deleted, all associated data is removed within 30 days (except where retention is required by law).
6. Your rights
If you are in the EU/EEA or California, you have the right to:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate data in your profile settings.
- Erasure — request deletion of your account and associated data.
- Portability — request a machine-readable export of your data.
- Object — object to processing based on legitimate interest.
- Withdraw consent — at any time for mood/wellbeing features.
To exercise any of these rights, email us at hello@fernhilldance.com with “Data Request” in the subject line. We respond within 30 days.
7. Security
We use row-level security on all database tables, TLS encryption in transit, HTTPS everywhere, and a strict Content Security Policy. Direct messages use end-to-end encryption. No security measure is 100% effective — if you discover a vulnerability, please email hello@fernhilldance.com.
8. Cookies
We use only session cookies required for authentication (set by Supabase Auth). We do not use advertising, tracking, or third-party analytics cookies. GoatCounter analytics is cookieless.
9. Children
The platform is for adults 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please contact us for immediate removal.
10. Changes to this policy
We may update this policy periodically. Material changes will be announced inside the community. The effective date at the top of this page reflects the most recent revision.