Privacy and data rights

Last updated 5 October 2026

The public calendar works without an account. Telegram sign-in is only needed for attendance, event follows, suggestions, private calendars and Lucien's Den.

Private convention planning

Convention programmes are public. Signed-in choices are private session references, with your last acknowledged programme version. Your own timed Planning-to-go sessions appear in the Private Calendar and never change public attendance or public feeds.

Private convention groups store invited account references, display names, invitation status and each member's sharing choice. Sharing starts off, including for the creator. Explicitly sharing makes your whole plan for that convention, including future choices, visible to accepted members of that group. Stop-sharing, leaving, removal, deletion and blocking revoke subsequent access immediately. Group access is independent of Telegram Den membership; global site administrators do not gain access to your friends' plans.

Plans, memberships, invitations and group records expire 90 days after the convention ends. Account deletion removes your selections and memberships and deletes groups you own. Minimal keyed deletion records prevent old requests restoring deleted data. Approved public programmes remain as archives. These groups send no Telegram invitation or session alerts.

Discord event sharing

Connecting Discord stores a private association with your Discord account, your Discord username and encrypted authorisation credentials. Sharing checks your current LuciFurs server membership and channel permissions. The private picker includes only destinations where access can be established for you and the app. Age-restricted channels require a command inside Discord; members whose server verification cannot be established from their existing roles must also use Discord commands. We do not import conversations or member lists.

Each share requires a preview and confirmation. Cards contain approved public event details, without your Telegram identity or private plans. Short-lived confirmations expire after ten minutes; private sharing limits retain up to two days of keyed activity, and duplicate-prevention records expire after 400 days. Disconnecting or deleting your account removes the local connection and stops new shares. We also attempt to revoke the authorisation; you can remove LuciFurs in Discord's Authorised Apps settings. Cards already posted remain subject to Discord and channel moderation. Minimal keyed disconnection records prevent old requests from restoring a deleted connection. Discord processes information under its own privacy notice.

When Discord weekend polls are enabled, saved selections contribute Going unless you have an explicit website response. We store your private poll choices and attendance association; Discord receives only anonymous totals for that poll. Telegram polls remain independent. Disconnecting, closing or removing a poll does not erase saved attendance: withdraw your own choices in Account settings even without channel access. Voting never enables reminders or follows. Identifiable choices are removed after the relevant event's existing 90-day attendance retention; minimal duplicate-prevention records remain for 400 days. Account deletion removes your selections and closes polls you created.

Who runs this

LuciFurs is the UK data controller. Email contact@lucifu.rs with questions, complaints or data requests.

What is used and why

Most processing is based on legitimate interests: running the features people ask for, keeping private data private and preventing abuse. Consent applies to optional Google Analytics, making your LuciFurs profile public to signed-in people and optional Telegram messages. You can switch reminders off from Profile at any time, and blocking LuciFursBot stops every Telegram message.

Identity comes from Telegram when you sign in. LuciFurs can then store a keyed account ID, display name, optional username and photo, account settings, attendance choices, privately followed events, reminder preferences and due times, suggestions, private invitations, an optional saved place and update times. Den data is explained in the separate Den notice. Phone numbers, contacts and chat history are not collected.

Who can see it

Interested and Going totals are public. Event follows are private and have no public total or follower list. Profiles are private by default. If you turn on Public on LuciFurs, signed-in users can see your current Telegram name, optional username and photo for events you responded to, and can find your exact @username when tagging people in private events. Turning it off hides you from attendee lists and site-wide tagging. Telegram reminders do not require a public profile.

If you explicitly open LuciFursBot from a reminder or update link, LuciFurs stores an encrypted private chat identifier. When reminders are on, future public events you mark Going receive a due-time record and are rechecked before LuciFursBot messages you around 24 hours before they start. All-day reminders are sent at 09:00 in the event's timezone on the previous day. The same private chat can receive invitation alerts, event suggestion review updates and important approved changes to events you follow. Change jobs store only keyed account and event references plus bounded change categories; the latest public event is checked again before delivery. Reminder and change-alert records and message content are not sent to analytics.

Authorised administrators can review suggestions and basic account or usage information. They do not get a person-by-person activity history through the admin area. Private data is not put in public pages, search results or public calendar feeds.

Site-wide private event discovery is off while your profile is private. People in a Den you share can still find you through a live, three-character Telegram member search; this may include current group members who have never registered with LuciFurs. LuciFurs does not import or retain complete group rosters. When your profile is public, any signed-in user can also find your exact Telegram username. An invitation stays private to its creator and recipient; accepting adds it to your private calendar. The creator sees current profile details when available, otherwise the name and optional username saved with the invitation. You can decline and block future invitations from that person.

Retention and private links

Attendance choices, event follows, reminder records and change-alert jobs expire 90 days after the event or final known occurrence. Privacy-safe usage totals expire after 90 days and inactive account directory entries after 180 days. Your profile stays until you delete the account so its privacy choice remains consistent. Photos are removed when you hide your identity or delete the account. Account deletion also removes event follows, the Telegram notification link, pending reminders and pending change alerts.

A private attendance-calendar link contains your Going events, if selected your Interested events, and invite-only events you create. Anyone with the link can read those event details. It does not include invitee identities, events created by other people or Den plans. Resetting or disabling it revokes the old address. Deleting your account removes your invite-only events and invitations. Approved public events remain, but their former owner is no longer identified.

Organiser access

If you request organiser access, LuciFurs stores your keyed account identity, claim notes, public evidence references, review decision and granted role. Authorised reviewers see that evidence. Your organisation workspace shows linked public listings and limited pending-change status; it does not show other people's evidence or identities. Proposed corrections remain private until a person approves the public event facts.

Unapproved claims expire after 30 days. Audit records and revoked memberships expire after 180 days; approved decisions retain their provenance. Account deletion revokes access and removes claim evidence, identifying notes and private organiser proposal content. Pseudonymous keys may remain for the retention period, and a deletion fence prevents old sessions from regaining access. Published event history remains available.

Near me

Distance filters calculate straight-line distances in your browser. Device location is requested only when you choose Use my location. A place deliberately saved in Profile remains private. Search URLs and analytics do not contain your starting coordinates.

When you choose Find events in Travel time, your starting coordinates and public venue coordinates are sent through our server to Geoapify. We send routing options, but no visitor identity, event names or attendance information. Private routing caches expire after five minutes; coordinates are not written to our routing logs or stored as a location history. Persistent usage counters contain only credit reservations and timestamps. Geoapify generally retains successful request data for no longer than 24 hours under its privacy policy. Google also processes place searches and map requests under its own notice.

Who data goes to

AWS hosts the site and primary data in Ireland. Telegram handles sign-in, group checks, bot messages and polls. Google provides Maps, optional place suggestions and, only with your consent, Analytics. Private routes are reported using generic names without IDs or private content. These services can process data internationally under their own safeguards. See the AWS, Telegram and Google privacy notices and the Google Maps terms.

Advertising and your choices

Public pages on events.lucifu.rs use Google AdSense limited ads to help support the site. LuciFurs does not offer personalised advertising. Analytics consent is separate from limited advertising: allowing analytics does not give permission to build an advertising profile or use your browsing history to personalise ads.

Google receives information such as your IP address, browser and device information and public page details to deliver ads and prevent fraud. Limited ads do not use personal data for ad personalisation, but may use fraud-prevention cookies and local storage. They are not anonymous or entirely free of device storage. Google's programmatic advertising service can also involve participating buyers. Read Google's limited-ad explanation for how that service works.

Rejecting analytics does not hide limited ads or prevent access to the public calendar. Basic ad delivery and fraud prevention rely on legitimate interests where permitted; this does not replace consent for storage or processing that requires it. Advertising storage or tracking that requires consent is not used without it. To exercise your right to object to processing based on legitimate interests, contact contact@lucifu.rs.

The same settings panel lets you withdraw consent for optional analytics. Withdrawal stops future consent-based processing but does not undo processing that was lawful before withdrawal. Google may process information outside the UK or EEA. Read how Google uses information from partner sites, its privacy notice, cookie purposes and retention periods and international transfer safeguards. Contact LuciFurs if you want to exercise other data rights or object to processing based on legitimate interests.

Advertising is limited to public Events content. LuciFurs does not provide Telegram identity, private attendance or event details, invitations, Den content, saved places or precise Near me coordinates for advertising. Private account, organiser and admin surfaces are excluded. The cookie notice explains advertising storage and your controls.

Cookies and logs

One secure cookie keeps you signed in for up to seven days and another remembers the first day of your week for up to one year. Optional Google Analytics stays off until you allow it and receives only generic route names for private areas. Analytics choices and limited-ad information share one settings panel. Analytics consent does not authorise advertising cookies or tracking. The cookie details describe the purposes, choices and durations.

Normal security logs can include IP address, time, page, browser and response status. Apache logs rotate daily and are kept for about 14 days. Application logs are size-limited. Private attendance-calendar tokens are not written to access logs.

Your rights

You can ask to access, correct, delete, restrict or move your data, or object to how it is used. Rights depend on the lawful basis. Email contact@lucifu.rs; LuciFurs may need to confirm your Telegram account and will normally reply within one month. You can also delete your account from Profile. You can withdraw optional analytics consent through Privacy and cookie settings without deleting your account.

Checks and complaints

Telegram sign-in and group membership are checked automatically, but LuciFurs makes no automated legal or similarly significant decisions. Event approvals are handled by a person.

If something is wrong, contact LuciFurs first. You can also complain to the UK Information Commissioner through the ICO complaints service or call 0303 123 1113.