Privacy Policy

Information we collect

• Account information — your name, email address, and sign-in details. We sign you in with a one-time emailed code or with Google; we never store a password.
• Profile information you choose to give us, such as your interests, the activities you want to hear about, a phone number, and anything you tell us about fitness level or accessibility needs so a host can plan well.
• Activity data — reservations, waitlist entries, saved experiences, the names of guests you bring, stories you submit, and messages you send us.
• Payment information — paid reservations and memberships are processed by Stripe. We receive a confirmation and the last digits of the card; we never see or store your full card number.
• Device and usage data — IP address, browser and operating system, pages viewed, and referring URLs.
• Cookies and similar technologies — used to keep you signed in, remember your preferences, and understand how the Platform is used. You can manage cookies in your browser settings, though some features will not work without them.

How we use your information

• Provide, operate, and improve the Platform.
• Confirm and manage your reservations, waitlist spots, and memberships, and send you the details you need to show up.
• Communicate with you about experiences, updates, and community opportunities.
• Personalize what we show you and recommend experiences you are likely to enjoy.
• Analyze usage trends so we can build the right things.
• Keep the Platform safe, comply with legal obligations, and enforce our Terms of Service.

Analytics and advertising choices

We measure how the Platform is used with our own first-party analytics. If you are not signed in, those events are not tied to you — only to a browser session that resets when you sign out. Raw analytics events are deleted automatically after 90 days; what remains is aggregate counts.

We also use the Meta advertising pixel and Meta’s Conversions API to measure and target our advertising. If your browser sends a Do Not Track or Global Privacy Control signal, we honor it: the pixel does not load and we do not send advertising events for you. That signal is also how you opt out of targeted advertising under Colorado law — you can also email us and we will apply the opt-out to your account.

Sharing of information

We do not sell your personal information. We share it only in these situations:

• Service providers who help us run the Platform — hosting and database, email delivery, payment processing, analytics, and advertising — under contracts that require them to protect your data and use it only for us.
• Event organizers and partners. If you register for a partner-run event through the Platform, we share the registration details the organizer needs to manage your participation, and their own privacy practices apply from that point on.
• Hosts and ambassadors for an experience you have reserved. They see the names on the roster, and any fitness or accessibility note you chose to share. Phone numbers are never shown on a roster, and email addresses are visible only to 2nd Summit staff.
• Legal requirements — if required by law, regulation, legal process, or a government request, or to protect the rights, safety, or property of 2nd Summit, our members, or the public.

Third-party links and events

The Platform links to third-party websites, events, services, and products. We are not responsible for their privacy practices. Please review their policies before sharing information with them.

Email and text messages

We send two kinds of messages. Service messages — reservation confirmations, sign-in codes, changes to an experience you are registered for — come with your use of the Platform. Marketing messages are optional: every one carries an unsubscribe link, and you can also manage what you hear about from your preferences. Unsubscribing from marketing does not stop service messages. If you give us a phone number and agree to texts, message and data rates may apply and you can reply STOP at any time.

Data retention

We keep your personal information for as long as your account is active or as needed to run the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. Raw analytics events are deleted on the schedule above. If you ask us to delete your account, we will remove or de-identify your personal information, except where we are required to keep it — for example, records of payments.

Data security

We use reasonable administrative, technical, and organizational measures to protect your information. No online system can guarantee complete security, and we cannot ensure the absolute security of your data.

Children’s privacy

The Platform is built for adults and is not intended for anyone under 18. We do not knowingly collect personal information from children. If we learn that we have, we will delete it promptly.

Your rights and choices

• Your account. You can update or delete your information from your account, or by asking us.
• Marketing. Unsubscribe from any marketing email, or adjust your preferences.
• Cookies and tracking. Manage cookies in your browser; turn on Global Privacy Control to opt out of targeted advertising.
• Colorado residents. Under the Colorado Privacy Act you may have the right to access, correct, delete, or receive a copy of your personal data, and to opt out of targeted advertising and profiling. Email us to exercise those rights. If we deny a request, you may appeal by replying to our response, and you may contact the Colorado Attorney General.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will post the updated policy here with a new “Last updated” date. Continuing to use the Platform after that means you accept the updated policy.

Contact us

Questions about this policy or how your information is handled? Email us at hello@2ndsummit.org or use our contact form.