How We Protect Your Data

Bijgewerkt 20 okt 2026

How we protect your data

Cloomba is built and hosted in Europe, with GDPR compliance as a baseline — not an afterthought.

Where your data lives

Cloomba runs on Railway, with servers in EU West (Amsterdam, Netherlands). Your data stays in the European Union as part of normal platform operations, with one exception: the title, description and venue city and country of a public event go to Anthropic, which picks the event's categories and languages.

Images and media are stored on Cloudflare R2 with CDN delivery — also with EU data residency.

What we collect

We collect only what's needed to run the platform: your name, email or phone number, profile photo, and the events and RSVPs associated with your account. See What data we collect and why for the full breakdown.

Authentication

Cloomba uses Firebase Authentication (Google) for sign-in. We never store passwords. Sign-in is handled with an email link, or with Google, Apple, GitHub or Telegram.

Your rights

As a user in the EU (or anywhere), you have the right to access, correct, export, and delete your data. See GDPR & Your Rights for details on how to exercise them.

Security practices

  • All data is transmitted over HTTPS
  • Access to production systems is restricted to authorized personnel
  • We do not sell your data to third parties

Questions? contact us.