Privacy Policy

Last updated: March 2026

Who we are

TurnOut (“we”, “us”, “our”) operates the website at turnout.social. TurnOut is a platform for discovering and joining local group outdoor activities.

For any privacy-related questions, contact us at hello@turnout.social.

What data we collect

Account data

When you create an account we collect your email address and a display name. You may optionally provide a short bio, location, and a profile photo.

Activity data

When you post a ride or join one, we store the details you provide (route name, location, date, difficulty, description) and your participation. When you create or follow a club, we record that relationship.

Analytics and cookies

With your consent, we use Google Analytics 4 to understand how visitors use TurnOut (page views, session duration, referral source). GA4 sets cookies to distinguish users. No analytics data is collected until you accept cookies.

Technical data

Standard web server logs may capture your IP address, browser type, and the pages you visit. These are used for security monitoring and are not linked to your account for marketing purposes.

How we use your data

To operate your account and authenticate you
To display your profile, rides you've posted, and clubs you follow
To send transactional emails (email verification, password reset)
To understand how people use TurnOut and improve the product (analytics, with consent)
To respond to feedback you submit

We do not sell your data, use it for advertising, or share it with third parties except as described in this policy.

Third parties we use

Supabase — our database and authentication provider. Your account data and ride/club records are stored on Supabase infrastructure (AWS, primarily EU regions). See Supabase's privacy policy.

Vercel — our hosting provider. Your requests are routed through Vercel's global edge network. See Vercel's privacy policy.

Resend — used to send transactional emails (email verification, password reset, feedback). Your email address is shared with Resend solely to deliver these messages. See Resend's privacy policy.

Google Analytics 4 — used to analyse site usage with your consent. Google may process data in the US. See Google's privacy policy.

Cookies

We use two categories of cookies:

Strictly necessary — Supabase authentication tokens stored in your browser so you stay signed in. These cannot be disabled without breaking the site.
Analytics (optional) — Google Analytics cookies set only with your consent. You can withdraw consent at any time by clicking “Cookie settings” in the footer.

Data retention

We keep your account data for as long as your account is active. Ride records are kept indefinitely so participants can review past events. If you delete your account, your profile data and participation records are removed. Ride posts you created will be anonymised rather than deleted, so other participants retain their record of the event.

Your rights

Under UK GDPR you have the right to:

Access — request a copy of your personal data
Correction — update inaccurate data (via your profile page)
Erasure — delete your account and associated data (via your profile page)
Portability — receive your data in a machine-readable format on request
Withdraw consent — opt out of analytics cookies at any time

To exercise any right, email us at hello@turnout.social. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Changes to this policy

We may update this policy occasionally. Significant changes will be communicated by updating the “Last updated” date above. Continued use of TurnOut after changes constitutes acceptance.