Arnonym OÜ, Sepapaja 6, 15551 Tallinn, Estonia (registry code 17322096). Contact for any privacy matter, including the rights listed below: hello@mission-support.com.

No analytics and no tracking cookies. We run no analytics product, set no advertising or tracking cookies, and embed no social-media or third-party scripts. Nothing on this site profiles you.

No third-party font requests. The typefaces (Fraunces, Geist, Geist Mono, Playfair Display, Inter) are downloaded at build time and served from our own domain. Your browser never contacts Google to render this page, so no IP address reaches a font CDN.

Server logs. Our hosting provider records the usual technical request data — IP address, timestamp, requested URL, user agent — to deliver the site and defend it against abuse. Legal basis: Article 6(1)(f) GDPR (legitimate interest in operating a secure website). We do not merge these logs with anything else and do not use them to identify visitors.

The buttons on this site open your own mail client. If you write to us, we process what you send (name, email address, whatever you tell us about your event) to answer you — Article 6(1)(b) GDPR for pre-contractual steps, otherwise Article 6(1)(f). We keep that correspondence for as long as the conversation is live plus any statutory retention period, and no longer.

Our mailbox runs on Google Workspace, so anything you send us is processed by Google on our behalf — see the processor list below.

Login cookies. Organisers and door staff sign in with an emailed link. That sets a session cookie (strictly necessary, no tracking) which expires after the session. The sign-in mail is sent by our authentication provider (Supabase) on our behalf.

Vercel Inc. hosts this website and runs the application (registration forms, admin pages, ticket pages). Our functions are pinned to Vercel’s Frankfurt region (fra1); Vercel processes the server logs described above under its Data Processing Addendum, with the EU Standard Contractual Clauses for any transfer outside the EU.

Supabase provides the database and authentication, hosted on AWS in Frankfurt (eu-central-1). Guest registrations, ticket codes, form answers and the mail log live there.

Brevo (Sendinblue SAS, Paris) delivers the emails the platform sends to guests and organisers (confirmation, ticket, reminder, campaign mails, staff sign-in links). Brevo receives the recipient’s name, email address and the mail content, and routes links through its redirect domain (r.mail.mission-support.com) — Brevo does not allow switching that off. Opens and clicks are recorded in anonymised form only, not per recipient.

Stripe Payments Europe, Ltd. (Dublin) handles payments — plan subscriptions, event passes, and paid tickets including the payouts to the organising account (Stripe Connect). Stripe receives the amount, the currency, the buyer’s email address and name, and which event or plan the payment belongs to. Card details are entered on Stripe’s own hosted checkout and never reach our servers.

Sentry (Functional Software, Inc.) records application errors and crashes so we can fix them. We use Sentry’s EU region, which stores the data in Germany (de.sentry.io). An error report contains the technical fault, the page path, the browser and operating system, and the IP address of the request. There is no session replay, and ticket, invitation and unsubscribe tokens are stripped from URLs before an event leaves your browser.

Google Ireland Limited (Dublin) provides our own mailbox (Google Workspace). It processes the correspondence you send to hello@mission-support.com — not the mails the platform sends to guests, which go through Brevo.

Cloudflare answers DNS for mission-support.com only; it does not proxy traffic and sees no page content.

We do not send anything from this website or the platform to an AI provider, an advertising network, a QR-code service, or a data broker. Ticket QR codes are rendered by our own application and served from our own domain.

When an organisation runs an event on Mission Support, that organisation — not us — is the controller for its guests’ data; we act as its processor under a data processing agreement concluded with that organisation, using the processors listed above as sub-processors. The organisation’s own privacy notice is linked on its event pages. If you registered for an event and want to know what is stored about you, contact the organisation that invited you; if you cannot reach them, write to hello@mission-support.com and we will point you to the right controller.

Guest data is kept for the duration of the event and the organiser’s follow-up, and deleted or anonymised on the organiser’s instruction or at the end of the contract. Independently of that, a daily job anonymises contacts without any registration after 24 months of inactivity and deletes mail delivery logs after 12 months. Registration records are kept for the organiser’s event history until the organiser removes them or the account is deleted.

Under the GDPR you may request access to your data, its correction or erasure, restriction of processing, data portability, and you may object to processing based on legitimate interest. Write to hello@mission-support.com — no particular form is required.

You also have the right to lodge a complaint with a supervisory authority. Ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn); you may equally contact the authority where you live.