Privacy Policy
Last updated July 25, 2026
The short version: we collect what the site needs to work, we publish only what a directory has to publish, every optional email is off until you ask for it, and you can have your information corrected or deleted by writing to us. The long version follows.
1. Who this is about
Convention Crasher is a directory of magic conventions, the people who perform at them, and the businesses that serve them. It is operated by Jafo Digital Magic LLC, reachable at 7862 W Irlo Bronson Memorial Hwy #126, Kissimmee, FL 34747.
This policy covers https://conventioncrasher.com and the email we send. It does not cover the conventions themselves, or any site we link out to. Those organizations handle your information under their own rules.
2. What we collect
What you give us
- Account details. Your email address and a password, which we store only as a one-way hash and cannot read.
- Profile details, all optional. Name, stage name, bio, photo, website, Instagram and Facebook.
- Home base. The city, state and country you set so the site can sort conventions by distance. We convert that to approximate coordinates. It is a place name you choose, not your device location, and we never ask your browser for GPS.
- Content you post. Convention listings, schedules, pricing, images, and anything else you publish through the site.
- Messages. What you write to us, and the address you write from.
What we record automatically
- Standard server records: IP address, browser and device type, the pages requested, and the time.
- Whether an email we sent was delivered, opened, bounced, or reported as spam. This is how we keep our sending working and honour unsubscribes.
- Analytics and session activity through the third parties listed in section 6, including a replay of how a page was used. See the Cookie Policy for the detail.
What we do not collect
We do not take payments, so we never see card numbers or bank details. We do not ask for government identification, and we do not buy personal information from data brokers.
3. What is public
This is a public directory. That is the point of it, so it is worth being exact about which parts of your account anyone on the internet can see.
Public: your display or stage name, profile photo, bio, performer credits, the conventions you are listed at, and, once your email is verified, your website and social links.
Never public: your email address, your password, your exact home address, your notification settings, and your message history with us.
Your home base appears only as a general area, and only where you have chosen to show it. It is used mainly to sort listings for you, not to advertise where you live.
Anything public can be copied, cached by search engines, or archived by services we do not control. Removing something here does not reach those copies, though we will help where we can.
4. Profiles created without an account
Most performer profiles on this site were not created by the performer. When a convention publishes a lineup or a schedule, we list the acts that appear on it, because a directory of conventions that omits who is performing is not much of a directory.
Those listings hold only what the convention already published: a name, sometimes a photo or a description the organizer supplied, and the events the person appears in. There is no account, no email address, and no contact detail unless the organizer published one.
If one of them is about you, you have three options, and all of them are free:
- Claim it. Create an account and take ownership, after which you control the content.
- Correct it. Write to info@conventioncrasher.com and tell us what is wrong.
- Have it removed. Ask, and we will take it down. We do not require a reason and we will not argue about it.
Removal requests are actioned within 30 days and normally much sooner. Where the law gives you a right to object to this kind of listing, this is how you exercise it.
5. Why we use it
- To run your account, sign you in, and keep it secure.
- To show the directory, and to sort it by distance from your home base.
- To send email you asked for, and the small number of messages we must send regardless, such as email verification and password resets.
- To answer you when you write to us.
- To find and stop spam, scraping, and abuse.
- To understand which parts of the site get used, so we can improve them.
- To measure whether our advertising works.
We do not sell your personal information, and we do not share it so others can advertise to you elsewhere. Under California law those terms have specific meanings; using the Meta tools described below may count as "sharing" for cross-context advertising, which is why the Cookie Policy explains how to switch it off.
6. Who else sees it
We use other companies to run the site. They may only use what they receive to provide their service to us.
| Company | What for | What they receive |
|---|---|---|
| Amazon Web Services | Hosting, file storage for uploaded images, and sending email. | Everything stored in the account, including uploaded photos and the address email is sent to. |
| Render | Runs the application servers and the database. | All account and listing data, as the hosting provider. |
| Google Analytics | Counts visits and shows which pages get used. | Pages viewed, approximate location from IP address, device and browser. |
| Microsoft Clarity | Records how pages are used, including mouse movement, clicks and scrolling, so layout problems can be found. | A recording of the interaction with the page, plus device, browser and approximate location. |
| Meta (Facebook) Pixel and Conversions API | Measures whether advertising brings people to the site. | Pages viewed, and on account creation an identifier derived from the email address, together with IP address and browser. |
| Zoho Mail | Receives and answers messages sent to the support address. | The contents of messages sent to us, and the sender address. |
| OpenAI | Powers the Schedule Helper, which reads an uploaded or linked convention schedule and turns it into structured events. | The contents of the schedule document an organizer submits. Not used for anything else, and member account data is never sent. |
| YouTube | Plays embedded videos on profiles and listings. | Loading an embedded video tells YouTube the page it was viewed on. |
We will also disclose information if the law requires it, to enforce our Terms of Service, or to protect someone's safety. If the site is ever sold or merged, account information would transfer with it, and we would say so here first.
7. Email and how to stop it
Everything optional is off until you turn it on. A new account receives no newsletters and no alerts.
Always sent: email verification, password resets, and notices about your account or an application you submitted. These are part of having an account and cannot be switched off while you have one.
Only if you ask: the roundup, convention alerts near your home base, and updates about conventions you follow.
Change any of it in your account settings, or use the unsubscribe link in any message, which works without signing in and takes effect immediately. Unsubscribing never affects password resets.
8. Your rights
Wherever you live, you can ask us to give you a copy of what we hold, correct it, or delete it. Write to info@conventioncrasher.com. We answer within 30 days, and we will not treat you worse for asking.
If you are in the UK or the European Economic Area, you also have the right to object to processing, to ask us to restrict it, to receive your data in a portable form, and to complain to your data protection authority. Our legal bases are: performing our contract with you, for running your account; your consent, for optional email and for non-essential cookies; and our legitimate interests in operating a public directory and keeping it free of abuse.
If you are in California, you have the right to know what we collect and why, to delete it, to correct it, and to opt out of sharing for cross-context advertising. The categories we collect and the parties we disclose to are listed above rather than in a separate schedule, so that this page has one answer instead of two.
You can delete your account at any time from your account settings. Deleting a performer profile you claimed returns it to an unclaimed listing rather than erasing the convention history around it, because that history belongs to the conventions as much as to you. If you want the listing gone too, ask and we will remove it.
9. How long we keep it, and how it is protected
Account information is kept while the account exists and for up to 90 days after deletion, so an accidental deletion can be undone. Backups age out within a year. Email delivery records are kept for two years, because sending reputation problems are diagnosed over long periods. Published convention listings and schedules are kept indefinitely as a historical record.
Traffic runs over HTTPS. Passwords are stored as bcrypt hashes, never as text. Access to production systems is limited to people who need it. That said, no site can promise perfect security, and we will not pretend otherwise. If a breach affects you, we will tell you.
10. Age
You must be at least 13 to hold an account. We do not knowingly collect information from children under 13. If you believe a child has created an account, write to info@conventioncrasher.com and we will remove it.
11. Where your information is held
We operate from the United States and store information there. If you use the site from elsewhere, your information is transferred to the United States, which may have different privacy protections than your own country. Where transfers out of the UK or EEA require a legal mechanism, we rely on the European Commission's standard contractual clauses through our service providers.
12. Changes to this policy
When we change this page we update the date at the top. If a change materially affects your rights, we will email registered members before it takes effect rather than relying on you to notice.
Questions about this page? Write to info@conventioncrasher.com or use the contact form.
