Privacy Policy · The Fort List

The short version

We collect the least we can: what you tell us when you ask to join, RSVP, or set your preferences, plus basic analytics about how the site is used. We do not sell your information. We do not text you unless you explicitly ask us to. You can ask us what we hold about you, correct it, or have it deleted.

Who we are

The Fort List is a local events and community list for Fort Collins, Colorado, operated by Good Rooms Only. For any privacy question, correction, or deletion request, write to operator@thefortlist.com.

What we collect

What you give us. Name, email address, and — only if you choose to provide it — a phone number and social handle, submitted through our nomination, venue, sponsor, talent, or newsletter forms.
Membership and event activity. Whether you were invited to an event, whether you RSVP'd, and whether you attended. This is how the list works.
Your preferences. The notification channels and interests you set in your member portal, and — if you opt in to text messages — the exact consent wording you agreed to and the time you agreed to it. We keep that record because consent has to be provable, not asserted.
Site analytics. Page views, interaction events, browser visitor and session identifiers, device/browser characteristics, and page-load performance through our first-party analytics. These also apply to website pages opened inside the iPhone app. We use them to understand usage and improve reliability, not for cross-company advertising tracking.
Authentication and diagnostics. Our sign-in service records account and session identifiers, IP addresses, browser/device details, sign-in outcomes, and approximate city/region/country information when supplied by the hosting network. These records support account security, troubleshooting and service reliability.

We do not collect Social Security numbers, driver's license numbers, or detailed financial data. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it.

The mobile app

The Fort List app for iPhone is a thin client of this same service. It collects nothing the website does not. It contains no advertising SDK and does not read your GPS location or device advertising identifier. Its embedded website pages use the first-party analytics and authentication services described above. Hunt check-ins identify the participating location you report visiting.

Your signed-in session. Kept in the iOS Keychain, on that device only, and only readable after you have unlocked the phone. Signing out deletes it.
Your interests and saved list. Your choices and saved events or venues are stored in the app's private sandbox. Where your membership supports it, preferences also sync to the website. Signing out clears the local list.
Hunt progress and prize claims. These are saved on our servers. Joining, check-ins, claims and delivery confirmations require a connection. Private prize codes are not stored in the app's offline cache.
Notifications. Off until you turn them on in the app's settings. Turning them off stops them, and iOS lets you revoke the permission at any time.

To request deletion of your Fort List account and associated personal data, use “Request account deletion” in the app settings. We process requests within 30 days and confirm completion at your account email, except for records we must legally retain. Your shared TENEO sign-in used by other services is separate. You can also email operator@thefortlist.com from the address on your account. You do not need to keep the app installed to ask, and we confirm when it is done. Deleting the app by itself removes the on-device copies above but not the server-side record.

Hunts, contest entries and gifts

Joining a hunt records your account identifier, display name, accepted rules version, and the stop codes you submit as check-ins. It does not capture your GPS location. We verify your signed-in account with TENEO. Hunt participation does not require SMS phone verification.

If you choose to submit a costume photo, we record your permission for private contest review. The image is stored privately, with embedded image metadata removed, and is accessible to the event organizer and assigned judges. Submitting it does not grant permission to publish it on social media or in a magazine.

Winners can claim a pickup, digital or delivery gift. For delivery, the details you provide are shared with the organizer and the assigned fulfiller. Recording fulfillment clears the delivery address from that award record. Prize status, judging records and fulfillment receipts remain in the event record; receipts may contain a digital gift code. Optional purchases open the named checkout provider, which handles payment information. Purchases do not improve contest eligibility or winning odds.

Text messages (SMS)

We only send text messages to people who have explicitly opted in. Consent is given by checking an unchecked box in your member preferences, next to this exact wording:

I agree to receive occasional text messages from The Fort List about Fort Collins events. Message and data rates may apply. Reply STOP to cancel at any time.

Consent to receive texts is never a condition of membership or of any purchase.
Message frequency varies. Message and data rates may apply.
Reply STOP to any message to stop receiving them. Reply HELP for help, or write to operator@thefortlist.com.
We do not sell, rent, or share mobile numbers or SMS consent with anyone for their own marketing.
You can turn texts off at any time in your member preferences. Doing so removes the consent record.

How we use it

To run the list and the events on it: to review a nomination, to invite you to a room that fits, to confirm an RSVP, to send the weekly email if you asked for it, and to understand which parts of the site are useful. We do not use your information to build advertising profiles, and we do not sell it.

Who we share it with

Service providers who operate parts of the system on our behalf — hosting, database, email, and text-message delivery — and only what each needs to do that job. We may disclose information if the law requires it. We do not sell personal information, and we do not share it for anyone else's marketing.

Public event listings on this site come from public sources and link back to them. They do not contain member information.

How long we keep it

Digital records for people with no event interaction for 36 consecutive months are anonymized or securely deleted. Physical door lists are destroyed immediately after an event. You can ask us to delete your information sooner.

How we protect it

Data is encrypted in transit and at rest. Access is role-based and limited to operators who need it; sensitive membership notes are restricted further. If unencrypted personal information is ever compromised, we will notify affected Colorado residents and the Colorado Attorney General within the timeframes the law requires.

Your rights

Colorado residents have the right under the Colorado Privacy Act to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not sell personal data or use it for targeted advertising, so there is nothing to opt out of on those two — but the rights stand and you may exercise them.

To make a request, write to operator@thefortlist.com. We will verify the request comes from you before acting on it, and we will not discriminate against you for making one. If we deny a request, you may appeal by replying to our decision.

We honor the Global Privacy Control (GPC) browser signal as an opt-out request where it applies.

Photography at events

Events may be photographed or filmed for promotional use. Where that is the case, it is disclosed at the point of RSVP and with signage at entry, and consent is part of the RSVP. Tell an operator on site if you do not want to be photographed.

Changes

If we change how we handle personal information, we will update this page and its effective date. Material changes will be communicated to members directly.