Privacy Notice

Last updated: 29 September 2026

SexyAgenda.nl (“we”) helps adults discover sex-positive events. This notice explains what personal data we process, why, for how long, and which providers help us.

Browsing without an account

You can search and read events without signing in. Your search filters live in the page address and in your browser; we do not store them against you. When you use the location search, the text you type goes through our server to Photon (Komoot, Germany) to suggest places; we do not keep it.

When you first visit we ask you to confirm you are 18 or older. Confirming sets the sa_age_ok cookie for one year so we don't ask again. It is strictly necessary and holds no personal data.

Your account and sign-in (Tonomy ID)

You sign in with Tonomy ID, a separate service that is its own controller for the sign-in and the Tonomy ID account. It tells us your email address and an identifier; we store those with the time of your last sign-in. A necessary sa_session cookie keeps you signed in for up to 30 days.

The first time you sign in we ask you to accept the terms. We record that you accepted, when, and which version.

Saved events and saved searches

You can save events and searches to your account. These can reveal your sexual orientation, gender identity or sexual interests, which the GDPR treats as special-category data. We process them on the basis of your explicit consent (Art. 9(2)(a)), given when you accept the terms, and only to show them to you and to send the saved-search emails you choose.

You can remove any of them on your account page at any time, or delete your account to remove them all. They are never used for analytics or advertising, and never shared except with the providers below that store or send them for us.

Emails (Resend)

Saved-search emails list new events that match a search, at the frequency you choose. You can turn them off per search, pause them all, or choose discreet emails that show only a count and a link. Every email has a one-click unsubscribe. Subject lines never name an interest.

Newsletter and marketing emails are separate and optional: we send them only if you tick the box when you sign up or join the newsletter, and you can withdraw at any time. For those we keep your address on a Resend mailing list.

Resend delivers both kinds of email for us and processes your address and the email contents to do so.

Anonymous page view counts

Every page view sends one anonymous count to our own server, whatever you choose in the cookie banner. It records which choice was in effect (accepted, necessary only, or not decided yet) and whether the banner was showing. Clicking a banner button sends one more count, recording which button. Nothing else is sent. It tells us how much of our traffic the analytics below can't see, so a quiet week and a blocked week don't look the same. The count carries no identifier, no page address and no cookie, and it is stored only as running totals per hour, so it can't be traced back to you.

We do this on the basis of our legitimate interest in knowing how complete our analytics is. Nothing is stored on your device for it. Your IP address reaches our hosting providers the way it does for any web request; it is used only to deliver the count and is not stored with it.

Feedback (Web3Forms)

The feedback button sends your message, the page you were on (without its search filters) and, if you give one, your email address through Web3Forms to our inbox. Please don't include sensitive details you don't want us to have.

The opt-out request form on the organisers page goes the same way: it sends the organiser's name, the link you give, your email address and your message, so we can check the request and reply.

Analytics and cookies (PostHog)

Only with your consent, PostHog (EU hosting) measures page views and interactions so we can improve the site. The text you type and the labels of what you click are masked, search filters are removed from page addresses and links, event pages are recorded without saying which event, and we never record your screen. Your saved events, saved searches and audience choices never reach analytics. PostHog uses a cookie plus browser storage, set only after you accept analytics.

Necessary items that need no consent: sa_age_ok (age confirmation, 1 year), sa_session (sign-in, up to 30 days) and cc_consent (your cookie choice, stored in the browser). You can change your cookie choice at any time:

Event listings, organisers and business contacts

Listings are compiled from public event pages, and include organiser and venue names and who an event says it is for. We link to the original page. Organisers can ask us to correct a listing or a label through the feedback button, and can ask not to be listed at all on our page for organisers. When an organiser is not listed, we take its events off the site and keep them stored but hidden, so a later search does not list them again.

If you organise an event we list, or we work with you, we keep a simple contact record: the organiser details published with your events (organiser name, website and social links), plus anything you send us and our notes. We use it to keep listings accurate and to get in touch about SexyAgenda, based on our legitimate interest in running and growing it. You can object at any time and we will stop and delete the record.

If you are signed in, you can submit an event page for us to check. We store the link with your account, so you can see what happened to it, and use it only to find and check that event. The link stays in our list of pages to check after you delete your account, but no longer with your name on it.

Social media

If you comment on, mention or message our social media accounts, we see what you send and may reply. The platform handles your data under its own privacy policy (Instagram, Telegram).

Hosting and other providers

Our database and API run on DigitalOcean in Amsterdam, and the website on Vercel. We also use providers for a contact database, social media management, and AI tools that help us process event listings and organise our work. They process data only on our instructions. Some are based outside the EU; those transfers rely on an EU adequacy decision (such as the EU-US Data Privacy Framework) or the EU's standard contractual clauses. We do not sell personal data, and no decision about you is made automatically.

How long we keep data

A saved event is removed 12 months after the event ended. An account nobody has signed in to for 24 months is deleted, after a warning email at least 30 days before. Consent records are kept as long as the account exists, as proof of what was agreed. Messages are kept while the conversation is relevant, and contact records until they are no longer useful or you object.

Who is responsible, and your rights

SexyAgenda is run by Captain Jack's App Factory, in the Netherlands, which is responsible for your data. You can see and delete your saved data on your account page. Deleting your account removes your account, sessions, consents, saved events and saved searches, and takes your address off our mailing list. Your Tonomy ID account, and its record that you signed in here, is deleted at Tonomy ID.

You can also ask us for a copy of your data, or to correct, delete, restrict or transfer it, and you can object to how we use it. Reach us through the channels on the About page. If you are not satisfied with our answer, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).