┌─ privacy.txt // TheCreatorsClub

┌──────────────────────────────────────────────────────────┐
│  PRIVACY POLICY · THE CREATORS CLUB · CREATORNET 001     │
└──────────────────────────────────────────────────────────┘

Privacy Policy

Effective date: 20 April 2026 · Last updated: 20 April 2026

The Creators Club ("we", "us", "our") runs community events, exhibitions, and creative showcases in Taipei. This policy explains what personal data we collect when you sign up, submit work, attend our events, vote on finalists, or use our websites — and what we do with it.

We believe in collecting as little data as is needed to run a well-organised event community, and we do not sell your data to advertisers.

1. Who we are

The Creators Club is an independent creative collective based in Taipei, Taiwan. For the purposes of this policy, the data controller is the collective, operated at the time of writing by Cable Wrap Creative.

Contact email: alex@thecreatorsclub.co
Location: Taipei, Taiwan
Websites covered: The sign-up site, this portfolio site, and any sub-pages under the same domains (including /vote, /submit, /entry, /privacy, and the members area).

2. Information we collect

2.1 Information you give us directly

Sign-up data: your name, email address, industry, profession / role, Instagram handle, and any portfolio link you provide when registering for our events.
Work submissions: creative work you upload to enter the Human Creativity Awards or similar showcases, together with a short description and your credits.
Votes and interactions: which finalist you voted for, and whether you confirmed following our Instagram account.
Profile data in the members area: optional social media handles, contact preferences, and any account details you choose to add.
Messages you send us by email or through forms on our sites.

2.2 Information we receive when you log in

When you sign in using a third-party account (Google or Facebook), that provider shares a limited set of information with us through Firebase Authentication. This is typically:

Your name, email address, and profile photo (as stored with that provider).
A unique provider user ID, used to recognise you on your next visit.

We do not receive your password for those accounts, and we do not post to them. If you sign up with email and password instead, we rely on Firebase Authentication to store your credentials securely — we never see your password in plaintext.

2.3 Event-day information

At in-person Creators Club events we may scan a QR code tied to your ticket in order to mark attendance. We record the fact that you checked in and the time, so we can confirm who attended which event.

2.4 Technical information

Local storage / cookies: small pieces of data stored in your browser so that the site remembers whether you already signed up, which language you picked, whether you completed a submission, and your login session.
Basic request data: your browser type, rough location (from IP address), and pages visited — handled by our hosting and by Firebase as part of normal web traffic.
In-app events: non-identifying events like "share card shown", "vote submitted" so we can understand how people use the site.

3. How we use your information

We use the information described above only for the following purposes:

To register you for events, issue tickets, and confirm attendance.
To run the Human Creativity Awards and similar showcases, including reviewing and displaying submitted work.
To operate the finalist vote, record your vote, and confirm eligibility (for example, by asking you to follow our Instagram account).
To send you event-related emails (confirmations, reminders, reschedule notices, thank-you emails, invitations to future editions).
To verify your email address when you create an account.
To improve the site and community experience based on aggregated usage patterns.
To comply with applicable law and respond to lawful requests from authorities.

We do not use your data for targeted advertising, and we do not sell it to third parties.

4. Who we share your information with

We share data only with service providers that help us run the community, and only to the minimum extent necessary:

Google / Firebase: We use Firebase Authentication to manage logins (Google, Facebook, email/password) and Firebase Firestore to store member profile data. We use Google Sheets and Apps Script to store sign-up and submission records. Google processes this data on our behalf.
Meta (Facebook / Instagram): If you choose to log in with Facebook, Meta acts as an identity provider and receives a login request from us. We also link out to our public Instagram profile; Meta's own privacy rules apply when you visit it.
QR / sharing tools: We generate QR codes for share cards via a free public API. Only the URL being encoded is sent — no personal data.
Email: Transactional emails (verification, receipts) are sent through Firebase or a standard email service provider acting on our behalf.
Event partners: Where an event is co-produced with a venue, sponsor, or media partner, we may share a guest list (name + ticket status only) for check-in purposes. We never share contact details for marketing without your explicit opt-in.
Legal requirements: We may disclose information where required by law, to enforce our terms, or to protect the rights, property, or safety of the community.

5. International transfers

Our service providers (notably Google and Meta) store and process data on servers outside Taiwan, including in the United States and the European Union. Where applicable, these transfers are covered by the providers' own standard contractual clauses and privacy frameworks.

6. How long we keep your data

Account and profile data: kept for as long as your account is active, and deleted on request.
Sign-up and attendance records: kept for up to 3 years after an event so we can organise anniversary editions, invite returning members, and respond to ticket queries.
Submitted creative work: kept indefinitely as part of our public showcase / archive unless you ask us to remove it.
Email logs: kept for up to 2 years.
Technical/usage logs: rotated out typically within 90 days.

7. Your rights

Depending on where you live, you have some or all of the following rights in relation to your personal data:

Access: request a copy of the data we hold about you.
Correction: ask us to fix incorrect or incomplete information.
Deletion: ask us to delete your account and associated data, subject to any records we are required to keep.
Withdraw consent: unsubscribe from event emails at any time, or disconnect a social login from your account in the members area.
Portability: request your data in a portable format.
Complain: lodge a complaint with your local data protection authority. In Taiwan, that is handled under the Personal Data Protection Act (PDPA).

To exercise any of these rights, email us at alex@thecreatorsclub.co. We aim to respond within 30 days.

8. Security

We rely on Google / Firebase infrastructure for authentication, storage, and transport security (HTTPS by default). Sensitive operations — such as submitting creative work — are protected with signed tokens (HMAC-SHA256). We can't guarantee absolute security of data transmitted over the internet, but we take reasonable steps to protect it.

9. Children's privacy

The Creators Club is intended for people aged 18 or older. We do not knowingly collect personal data from children under that age. If you believe a minor has provided us with data, please contact us and we will delete it.

10. Cookies and local storage

Our sites use browser localStorage and sessionStorage to remember state between visits — for example, that you have already signed up, your preferred language, or that you chose to use the desktop site instead of mobile. We do not use third-party advertising cookies or cross-site tracking.

Firebase may set first-party cookies for authentication sessions. You can clear these at any time through your browser settings; signing out will also invalidate the session.

11. Links to other sites

Our sites link out to Instagram, Vimeo, YouTube, Google Maps, and similar services. Those services have their own privacy policies, which apply as soon as you leave our pages.

12. Changes to this policy

We may update this policy from time to time — for example, when we add a new feature or switch service providers. When we make a material change, we will update the "Last updated" date at the top of this page and, where appropriate, notify signed-in members by email.

13. Contact us

Questions, requests, complaints, or general hello? Write to:

Email: alex@thecreatorsclub.co
Subject line: "Privacy — [your request]"