Privacy Policy

Smoke Signal ("we", "us", or "our") is an event and RSVP management application built on top of the ATProtocol. This privacy policy applies solely to the instance of Smoke Signal available at https://smokesignal.events (the "Site").

Smoke Signal is open source, licensed under the permissive MIT license. Other instances or derivatives hosted elsewhere are not covered by this policy.

Information We Collect

1. Personal Information

We do not collect any personally identifiable information (PII).

2. Automatically Collected Information

We avoid invasive data collection. However:

• Anonymized Data: Some data such as IP addresses or user agent strings may be collected, but only in anonymized form and not linked to individuals.
• Minimal Logging: We retain basic logs to ensure system integrity and security. These are not used for behavioral profiling or analytics.

3. Cookies and Tracking Technologies

We use only essential cookies required for site functionality. For more details, see our Cookie Policy.

4. ATProtocol Network Information

Smoke Signal interacts with the ATProtocol network to provide its features. This includes:

• Authentication and identity resolution
• Event creation, modification, and linking
• RSVP creation and modification
• Discovery of public events and user identities

Smoke Signal also makes outbound requests to:

• Resolve DID documents
• Connect to service endpoints (e.g. Personal Data Servers)
• Read and write records to external PDS instances
• Discovery of public events and user identities

Smoke Signal maintains an index of publicly available data but is not the source of truth for event or RSVP records.

How We Use Your Information

We use collected information to:

• Provide and operate the Site
• Respond to inquiries and provide support
• Comply with legal obligations and ensure system integrity

Legal Basis for Processing (EU Users)

For users in the European Union, we process your data based on:

• Consent (where applicable)
• Performance of a contract
• Legal obligation
• Legitimate interests, provided they do not override your rights

Sharing of Information

We may share limited information under these conditions:

• Service Providers: Only as necessary to deliver the Site (e.g., hosting providers)
• Legal Compliance: To comply with legal requirements, enforce our rights, or respond to lawful requests

Your Rights and Choices

1. Access and Correction

We do not collect personal data, so there is nothing to access or correct.

2. Data Deletion

You may request the deletion of data we index. However, since Smoke Signal reflects public records stored on external servers, full removal may require action at the PDS level.

3. Do Not Track

We honor Do Not Track (DNT) signals and do not use tracking technologies.

Data Security and Retention

We implement reasonable safeguards to protect the data we process. However, no system is 100% secure. Data is retained only as long as needed for functionality or required by law.

Note: ATProtocol is a public data protocol. There is no privacy mechanism in the protocol itself for hiding event or RSVP data. Smoke Signal reflects that architecture and cannot offer private storage.

Children's Privacy

This Site is not intended for children under 18. We do not knowingly collect data from minors. If you believe we have, contact us immediately to have it removed.

Indexed Data, External Content, and Third-Party Links

The content indexed and presented by Smoke Signal originates from ATProtocol PDS instances operated by third parties. Smoke Signal does not validate or moderate this content and cannot guarantee its accuracy or appropriateness.

Smoke Signal may contain links to third-party websites. We are not responsible for the privacy practices or the content of such websites. We encourage you to review the privacy policies of these third parties before providing them with your personal information.

Changes to This Privacy Policy

We may revise this Privacy Policy. Changes will be posted with an updated effective date. Continued use of the Site after updates constitutes acceptance.