Who we are
Emmanouil Makrygiannakis, trading as Spontaneous (spontaneous-app.com) ("we"), is the data controller for the personal information described here. Questions or requests: hello@spontaneous-app.com. In short: you don't need an account, we don't use cookies, and we collect as little as we can.
Your location
If you allow it when your browser asks, we use your phone's or computer's location to search near you and show how far away things are. It's sent with each search so our server can work out distances, and isn't saved to any database or profile. It may appear for a short time in our hosting provider's technical logs. It's never included in links you share, never sent to our analytics, and never used to track your movements or for advertising. You can say no, or withdraw permission in your browser settings at any time, and pick an area instead; withdrawing doesn't affect searches already made.
How the site is used (analytics)
We use PostHog, on its servers in the EU, to see how the site is used. It records: the pages opened (with their address, which includes any search in it); what's chosen - moods, types of listing ("Something specific"), the When, Where, People and Price filters, searches, "Show more", sharing a search, the order results are sorted in; which button on the home page is tapped; which listing's booking button is tapped (its title, type and price); whether you allowed your location (yes or no - never the location itself); whether you opened Spontaneous from your phone's home screen or in the browser, and what you do with the tip about adding it there; and, on the partner form, the type of business. Like any website tool it also receives your browser and device type, the website you came from and the time; a rough location (country or city) may be worked out from your connection.
It uses no cookies and stores nothing on your device, so each visit is counted on its own. We've set it up not to keep your IP address, and we don't use it to build a profile of you or to identify you by name or email. (Separately, the tip about adding Spontaneous to your home screen keeps two small notes in your browser: one so it's shown only with your first search in a tab (cleared when you close the tab), and, on an Android phone that has added it, one so it isn't shown again. They stay on your device and aren't sent to us.)
If you contact us
When a business fills in the partner form, we receive its name, type, email address and website or social media handle by email. If you email us, we receive your message and email address. We use these only to reply and to discuss working together.
Technical information
Like any website, our hosting provider receives your IP address and basic browser information when you visit. It's used to deliver the pages, keep the site secure (for example, limiting how many searches can be made in a minute) and fix problems.
Other websites and booking links
Listing pictures load directly from the websites of the venues and ticket sellers, which therefore receive your IP address and browser information. When you tap a booking button you leave Spontaneous for the seller's website. That seller may learn that you came from Spontaneous - for example from a referral or affiliate code in the link, which for some sellers lets them pay us a commission. From then on, their privacy policy and cookies apply. We don't receive any details of your booking.
Why we can use it
| What for | Information | Lawful basis |
|---|---|---|
| Searching near you and showing distances | Your location, if you allow it | Your consent |
| Understanding how the site is used, to improve it | Usage information (analytics) | Our legitimate interests |
| Replying to enquiries and partner requests | Name, email, business details, your message | Our legitimate interests, or steps you ask us to take |
| Running and securing the website | IP address, browser and device information | Our legitimate interests |
| Handling your data-protection requests | Your contact details and request | Legal obligation |
Who handles it for us
- Vercel - hosting the website, and its technical logs.
- PostHog - analytics, on servers in the EU.
- Resend - sending the partner form to our inbox.
- Zoho - our email inbox.
- Supabase - our database, which holds the listings only, no personal information.
We don't sell personal information or use it for advertising.
Information leaving the UK
Some of these providers are based in, or use servers in, other countries, including the United States. Where personal information is transferred outside the UK, it's covered by a safeguard recognised under UK data-protection law - such as an adequacy decision (including the UK extension to the EU-US Data Privacy Framework) or the UK International Data Transfer Agreement or Addendum.
How long we keep it
- Your location: not kept, beyond hosting logs.
- Hosting and security logs: a short time, no more than 30 days.
- Analytics: no longer than our analytics provider's retention period, and never beyond 2 years.
- Partner enquiries and emails: as long as needed to handle them and any partnership that follows, then up to 2 years after our last contact - or deleted sooner if you ask.
When we no longer need information, we delete it or make it anonymous.
Children
Spontaneous isn't aimed at children under 13, and many listings are for adults. We don't knowingly collect personal information from children.
Your rights
You can ask to see the personal information we hold about you, to correct or delete it, to restrict or object to how we use it, to have it in a portable format, and - where we rely on your consent - to withdraw it. Email hello@spontaneous-app.com. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office (ico.org.uk).
Changes
If what we do with personal information changes, we'll update this page; the date at the top shows the latest version. See also our terms of use.