Who holds your data
Grain Wedding Festival - Udruga Grain, Vodnikova ulica 11, 10000 Zagreb, Croatia (OIB 05707044107). Questions about your data:
info@thegrain.ws.
What this app knows about you
- Your e-mail address, taken from your ticket purchase. It is how the app knows you hold a ticket. Nobody else sees it.
- A six-digit sign-in code, kept only as an unreadable fingerprint, for fifteen minutes. We cannot read it back.
- When you first signed in, and when you last did, kept against your ticket so the Grain team knows who has found their way into the app and who to remind. Two dates, nothing about what you did while you were there.
- How many codes were asked for, counted for one hour against your address and against the connection that asked - the latter as an unreadable fingerprint, never as the address itself. It exists only to stop somebody mining the app for who is attending, and it is not used to see what you do in the app.
- Your name, shown next to anything you post in the forum.
- Your country and Instagram handle, if you gave them when buying your ticket. These appear in Grain Family 26 - see below.
- What you write in the forum, visible to everyone with a ticket.
There is no analytics, no advertising and no tracking of any kind in this app. We do not know which pages you opened or how long you stayed.
Grain Family 26
This is the list of attendees, put together from the ticket list, so it is complete from the first day - your name, country and Instagram are there without you having to do anything. Other attendees are the only people who can see it; your e-mail address is never part of it.
You can be taken off the list at any time - write to info@thegrain.ws and we remove you the same day.
Where it is kept
On Google Firebase, in Google’s European data centres. The e-mail carrying your sign-in code is sent through Resend. Both act only on our instructions.
What the app loads from elsewhere
Opening the app fetches typefaces from Google, program code from Cloudflare, and map tiles from OpenStreetMap. Those requests tell each of them your IP address, as any website would. Nothing about you personally is sent with them.
Links to speakers, sponsors and Instagram open outside the app, and from that point their own terms apply.
On your phone
The app remembers five small things in your browser: the name you post under, when you last read the announcements, when you last looked at the forum, whether you dismissed the “add to home screen” note, and the address you last signed in with, so that opening the app without a connection still shows you the schedule and the map. None of it leaves your phone and none of it is used to follow you.
How long
Everything is deleted by 31 December 2026. You do not have to ask for it.
Your rights
You can ask to see what we hold about you, to correct it, or to have it deleted before that date. Write to
info@thegrain.ws and we will answer within thirty days.
You also have the right to complain to the Croatian data protection authority (AZOP).
If you ask us to delete everything, your forum posts go with it.
Last updated 4 October 2026.
