Privacy Policy
Last updated: 27 August 2026
Who we are
IPSC Calendar (ipsc-calendar.com) is an aggregator of practical-shooting matches. Data controller: the site operator, reachable at the contact form.
What we collect and why
- E‑mail subscriptions — your e‑mail address and alert preferences (countries, disciplines, levels, alert types). Legal basis: consent (GDPR Art. 6(1)(a)), collected with double opt-in. We record the consent text and timestamp. Used solely to send the alerts you selected.
- Match submissions — organizer contact details you provide with a listing. Used to review and communicate about the listing.
- Contact messages — name, e‑mail and message content, kept for correspondence.
- Technical logs — standard web-server logs (IP address, user agent) kept short-term for security and abuse prevention (legitimate interest). Rate-limiting stores a salted hash of your IP, not the IP itself.
- Your country, guessed from your IP address — so the match and range lists open on the country you are probably in instead of the whole world. The guess is made on our own server, against a country header from our host and a locally stored copy of the free IP2Location LITE database; your address is not sent anywhere and is not stored for this. Legal basis: legitimate interest in showing a useful first page. Every page that does it says so, and one click shows all countries.
- Coordinates you volunteer — if you press "Near me", your browser asks you for permission and we put the position in the page URL (rounded to about 100 m) to filter by distance. We never store it. Because it is in the URL it does appear in our web-server logs, and if you then use the "Calendar feed" link on that page the coordinates travel to whichever calendar service you subscribe with. Nothing happens unless you press the button and allow it.
Cookies
- Session cookie — forms and security; for administrators, a login session. Strictly necessary.
- Country preference (
geo_country) — set only when you pick a country yourself or press "Show all countries", so we do not guess again on your next visit. It holds a two-letter country code or the wordALLand nothing else, lasts a year, and is not readable by scripts. Delete it in your browser at any time.
What we don't do
- No advertising trackers, no analytics cookies, no sale or sharing of your data with third parties for marketing.
- No profiling and no cross-site tracking. The country guess above is used to sort a list on the page you are looking at, and for nothing else.
Processors
Alert e‑mails are delivered via Brevo (Sendinblue GmbH, EU) acting as our processor. Map tiles are loaded from OpenStreetMap servers when you open a map view; your browser sends them your IP address as with any embedded resource.
Retention
Subscriber data is kept until you unsubscribe (plus a short suppression record so we don't e‑mail you again). Submissions and contact messages are kept as long as needed for the listing or correspondence.
Your rights
You can access, correct, export or delete your data at any time: every e‑mail contains a preferences link and a one-click unsubscribe. For anything else — or complaints — contact us; you also have the right to complain to your data-protection authority (in Slovenia: Informacijski pooblaščenec).