Privacy Policy · The Fort List

The short version

We collect the least we can: what you tell us when you ask to join, RSVP, or set your preferences, plus basic analytics about how the site is used. We do not sell your information. We do not text you unless you explicitly ask us to. You can ask us what we hold about you, correct it, or have it deleted.

Who we are

The Fort List is a local events and community list for Fort Collins, Colorado, operated by True Eira LLC. For any privacy question, correction, or deletion request, write to operator@thefortlist.com.

What we collect

What you give us. Name, email address, and — only if you choose to provide it — a phone number and social handle, submitted through our nomination, venue, sponsor, talent, or newsletter forms.
Membership and event activity. Whether you were invited to an event, whether you RSVP'd, and whether you attended. This is how the list works.
Your preferences. The notification channels and interests you set in your member portal, and — if you opt in to text messages — the exact consent wording you agreed to and the time you agreed to it. We keep that record because consent has to be provable, not asserted.
Site analytics. Page views, interaction events, browser visitor and session identifiers, device/browser characteristics, and page-load performance through our first-party analytics. These also apply to website pages opened inside the iPhone app. We use them to understand usage and improve reliability.
Advertising measurement (Meta). When we run ads on Facebook or Instagram, our website loads the Meta Pixel so we can tell which ads bring people to the site and show our ads to people who already visited. It sends Meta the page you opened, browser and device details, Meta's own cookies, and when you successfully create a passport or account (never what you typed). For a new guest passport, our server also confirms the successful signup using the existing Meta cookies, browser information, and a matching event ID to avoid counting it twice. That confirmation excludes your contact details, passport code, IP address, and URL query parameters. Meta processes this under its own privacy policy. Advertising measurement does not run inside the iPhone app, on private desks, or when your browser sends Global Privacy Control, and you can turn off ad personalization in your Facebook or Instagram ad settings. Walk learning is separate: after at least two stops are marked, finishing or ending a walk, or leaving its page, sends one anonymous summary to The Fort List with credentials omitted. It contains the route, date and morning/afternoon/evening/late band, marked stop order and skipped stop indices, hand or arrival marks, chosen start (walk start, a named popular start or “map”), map view, and tapped sight indices. Make it mine edits are reserved for when that feature exists; today the edits list is empty. It never contains a position, stamp identifier, member, visitor, session or device identifier. We retain only weekly counters per route, not individual walk records, and show patterns only at counts of five or more. These summaries do not go to AnalyticsOS. Global Privacy Control stops the browser from sending them.
Email delivery and links. Our email provider reports delivery failures, complaints, image loads and link visits so we can troubleshoot messages and help with unfinished setup. Image loads and link visits can come from privacy services or security scanners; they do not prove you read a message. The provider receives connection details such as IP address and browser information. Our private event history keeps message identifiers, subject, a hashed recipient identifier, timestamps and link categories for 90 days, without message bodies or complete links. An encrypted recovery queue may retain the provider notification, including connection details and links, for up to 14 days. You can use plain-text email or disable remote images; missing tracking does not prevent you from using a link or your account.
Authentication and diagnostics. Our sign-in service records account and session identifiers, IP addresses, browser/device details, sign-in outcomes, and approximate city/region/country information when supplied by the hosting network. These records support account security, troubleshooting and service reliability.

We do not collect Social Security numbers, driver's license numbers, or detailed financial data. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it.

Profiles, friends and invitations

If you create a social profile, we store the name, handle, bio, town and photo you choose, along with your visibility setting and adult confirmation. Profiles start private. Shared profiles and photos are reviewed before other people can discover them. We record friend requests, accepted connections, blocks and reports so those choices work across devices.

Personal invitation links record the sender, campaign, optional intended-recipient label, link requests and the verified account that accepts. A forwarded link does not prove that the intended recipient visited. Accepting an invitation does not add a friend or give permission to send marketing messages. A restricted organizer directory shows account information, signup sources, last recorded signed-in activity, participation and rewards. Missing historical identity or source information stays unknown.

Profile photos are resized and their embedded metadata is removed. Private photo reads pass through account and relationship checks. Replaced or deleted photo files enter a cleanup queue. When an account deletion is completed, the social profile and connections are removed; pseudonymous contest award and reversal records may remain for the prize audit. See Delete my data to request deletion or a correction.

Shop orders

Teneo Publishing LLC sells The Fort List gear. If you place an order, we keep its item, price, order status, email address, and shipping address in a private order record so we can fulfill it and help with delivery, returns, and refunds. Stripe handles card entry and payment; we receive payment and refund status, not your full card number. We share the information needed to make and ship the item with our fulfillment provider. Order records may be retained where accounting, tax, dispute, or other legal duties require it. Shopping does not enroll you in texts or a newsletter.

The mobile app

The Fort List app for iPhone uses this same service. It contains no advertising SDK and does not read your device advertising identifier. Locate, walking directions and stop check-ins can request location while you use them. A check-in can send the location reading to verify proximity and any published location bonus. The app does not track background location. Its embedded website pages use the first-party analytics and authentication services described above. Hunt check-ins identify the participating location you report visiting.

Your signed-in session. Kept in the iOS Keychain, on that device only, and only readable after you have unlocked the phone. Signing out deletes it.
Your interests and saved list. Your choices and saved events or venues are stored in the app's private sandbox. Where your membership supports it, preferences also sync to the website. Signing out clears the local list.
Hunt progress and prize claims. These are saved on our servers. Joining, check-ins, claims and delivery confirmations require a connection. Private prize codes are not stored in the app's offline cache.
App usage in updated versions. Screen visits, foreground time, public listing choices and camera, scan and route stages help us find broken or unfinished journeys. These use a temporary session held in memory, plus the app build and update version. The usage payload excludes your account identifier, typed text, photo identifiers or contents, exact location and private page URLs. Our server forwards these events to our first-party analytics without your sign-in credentials or device network headers. Website pages inside the app have their own analytics described above. Usage events do not record your screen.
Notifications. Off until you turn them on in the app's settings. Turning them off stops them, and iOS lets you revoke the permission at any time.

To request deletion of your Fort List account and associated personal data, use “Request account deletion” in the app settings. We process requests within 30 days and confirm completion at your account email, except for records we must legally retain. Your shared TENEO sign-in used by other services is separate. You can also email operator@thefortlist.com from the address on your account. You do not need to keep the app installed to ask, and we confirm when it is done. Deleting the app by itself removes the on-device copies above but not the server-side record.

Hunts, contest entries and gifts

Joining a hunt records your account identifier, display name, accepted rules version, and the stop codes you submit as check-ins. If you choose a location-assisted check-in, its location reading is sent to verify proximity or a location bonus. We verify your signed-in account with TENEO. Hunt participation does not require SMS phone verification.

If you choose to submit a costume photo, we record your permission for private contest review. The image is stored privately, with embedded image metadata removed, and is accessible to the event organizer and assigned judges. Submitting it does not grant permission to publish it on social media or in a magazine.

Winners can claim a pickup, digital or delivery gift. For delivery, the details you provide are shared with the organizer and the assigned fulfiller. Recording fulfillment clears the delivery address from that award record. Prize status, judging records and fulfillment receipts remain in the event record; receipts may contain a digital gift code. Optional purchases open the named checkout provider, which handles payment information. Purchases do not improve contest eligibility or winning odds.

Text messages (SMS)

We only send text messages to people who have explicitly opted in. Consent is given by checking an unchecked box in your member preferences, next to this exact wording:

I agree to receive occasional text messages from The Fort List about Fort Collins events. Message and data rates may apply. Reply STOP to cancel at any time.

Consent to receive texts is never a condition of membership or of any purchase.
Message frequency varies. Message and data rates may apply.
Reply STOP to any message to stop receiving them. Reply HELP for help, or write to operator@thefortlist.com.
We do not sell, rent, or share mobile numbers or SMS consent with anyone for their own marketing.
You can turn texts off at any time in your member preferences. Doing so removes the consent record.

How we use it

To run the list and the events on it: to review a nomination, to invite you to a room that fits, to confirm an RSVP, to send the weekly email if you asked for it, and to understand which parts of the site are useful. We do not use your information to build advertising profiles, and we do not sell it.

Service providers who operate parts of the system on our behalf — hosting, database, email, and text-message delivery — and only what each needs to do that job. We may disclose information if the law requires it. We do not sell personal information, and we do not share it for anyone else's marketing.

Public event listings on this site come from public sources and link back to them. They do not contain member information.

How long we keep it

Digital records for people with no event interaction for 36 consecutive months are anonymized or securely deleted. Physical door lists are destroyed immediately after an event. You can ask us to delete your information sooner.

How we protect it

Data is encrypted in transit and at rest. Access is role-based and limited to operators who need it; sensitive membership notes are restricted further. If unencrypted personal information is ever compromised, we will notify affected Colorado residents and the Colorado Attorney General within the timeframes the law requires.

Your rights and deleting your data

Colorado residents have the right under the Colorado Privacy Act to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not sell personal data or use it for targeted advertising, so there is nothing to opt out of on those two — but the rights stand and you may exercise them.

To make a request, write to operator@thefortlist.com. We will verify the request comes from you before acting on it, and we will not discriminate against you for making one. If we deny a request, you may appeal by replying to our decision.

We honor the Global Privacy Control (GPC) browser signal as an opt-out request where it applies.

Delete my data Back to events

Photography at events

Events may be photographed or filmed for promotional use. Where that is the case, it is disclosed at the point of RSVP and with signage at entry, and consent is part of the RSVP. Tell an operator on site if you do not want to be photographed.

Changes

If we change how we handle personal information, we will update this page and its effective date. Material changes will be communicated to members directly.