This document is provided in its original English version.
Clubfold · Service information
Privacy notice
What we store, why we use it, who can see it and how you stay in control.
Last updated 12 October 2026 · English
Club maps and wait estimates
Maps display confirmed venue pins or clearly labelled approximate city areas. Clubfold does not request or collect your device location for this feature. Authorized club staff can publish a general-admission wait estimate or a paused/closed status. Updates expire after 15 minutes; missing information never means zero wait, and estimates do not guarantee admission.
Web maps load OpenFreeMap tiles based on OpenStreetMap. The provider receives your IP address, request metadata and the viewed map area as part of delivery. No account details, private messages or membership QR are sent. Native iOS maps use Apple's MapKit, governed by Apple's privacy practices.
Who is responsible
The X70 operator identified in the imprint is responsible for personal data processed to operate Clubfold. Contact contact@x70.one for privacy requests. Our postal address is in the imprint.
Club operators use the membership and attendance information available to their authorized staff for their own club operations. Contact the relevant club about its admission decisions, benefits and any separate data practices. A club receives access only to its own members and conversations.
Account and membership data
We process your name, email address, password hash and sign-in/session information; encrypted authenticator secrets and recovery codes if you enable two-factor authentication; optional phone number and language preference; membership plan, subscribed benefits, dates, status, entry QR and club relationships; reservations, guest counts, saved event choices, attendance and messages. We use these records to provide and administer the account and features you request (Article 6(1)(b) GDPR).
Passwords are not stored as readable text. Payment-card details are entered with the payment provider. Clubfold stores payment and subscription identifiers, amounts and membership status when that integration is used, rather than full card numbers.
If you add a passkey, we store its public key, credential identifier, label, creation date and technical authenticator information to verify sign-ins. Your private key stays with your device or chosen passkey provider. Clubfold does not receive your fingerprint, face scan or device PIN. You can rename or remove passkeys in Profile.
Security and technical information
Our hosting and authentication services process technical request information such as IP address, browser information and session timestamps to operate and protect the service. The operator console records administrative actions, their timestamp, affected records, operator account identifier and email, and any recorded reason. Authentication rate-limit keys are hashed before storage. Those counters expire after their configured window and are removed by a scheduled cleanup.
We use proportionate security and abuse-prevention measures in our legitimate interest in protecting accounts and service availability (Article 6(1)(f) GDPR). We may retain records required to meet legal obligations (Article 6(1)(c)). We do not use the app for automated decisions with legal or similarly significant effects.
Clubs, communications and device permissions
The relevant club's owner and managers can see membership information, bookings, attendance and conversations needed to operate the club. Door staff have restricted attendance access. Other members cannot read your private club conversations.
Club announcement emails are optional and off by default. After verifying your email address, you may opt in separately for each club in Profile. We record your choice and update time, and recheck it before sending. Each announcement includes an unsubscribe link that works without signing in. Withdrawing this consent does not stop necessary account or payment messages (optional announcements: Article 6(1)(a) GDPR).
In-app updates are associated with your account. Optional device notifications require browser permission and store a push endpoint and encryption keys. A browser push service receives the notification payload when that channel is used. You can withdraw device permission or disable subscriptions in your profile.
Camera access is requested only when staff choose QR scanning. The scanner processes camera frames locally on your device or in your browser, depending on the app you use; Clubfold does not upload or store those frames. The scanned membership identifier is sent to validate entry.
Requests and support
When you request a club or contact support, we use the details you submit to respond and handle your request. The club-request form collects club name, your name, email and optional city. Do not include sensitive personal information or complete payment-card details in free-text messages.
App support submitted through our support form is stored by X70 Help at help.x70.one, in a separate Convex support backend. An OpenAI model may use your question and approved app documentation to provide a labelled automated answer. Our operators can continue the same private conversation. Resend emails answers and conversation links; email replies are not monitored. Do not send passwords, membership QR codes or complete payment details. Screenshots may be attached separately on Help after redacting unrelated information.
When Help is connected, a necessary x70_help_visitor cookie lasts up to 30 days to limit repeated submissions. Help receives one-way visitor and network identifiers rather than your raw IP address. Daily rate counters expire and are removed by scheduled cleanup. Cloudflare Turnstile processes browser and technical request information to check for automated abuse.
Resolved Help transcripts are removed after 90 days and screenshots after 30 days. Unresolved requests remain until resolved. Abandoned anonymous questions expire after seven days of inactivity. See the Help privacy notice for processing, recovery links and deletion requests. This support retention is separate from Clubfold account and club conversation retention.
Service providers and international processing
Vercel hosts the web app; Convex provides the database, authentication component and backend functions; Resend sends configured transactional email. The Clubfold production database is deployed in the EU West region. A regional database location does not mean every provider's support, logs or subprocessors remain exclusively in the EU.
Stripe is the implemented payment provider; live paid checkout is currently unavailable. You can add an eligible membership card to Apple Wallet and receive updates to its status. Optional social sign-in remains unavailable unless its provider is configured. A provider receives the information needed for the feature you choose.
If you choose Apple Wallet, the saved pass includes your member name, club, membership benefits, validity and entry QR. Apple Wallet registers an opaque device identifier and push token with Clubfold to fetch updates. These delivery identifiers are linked to the issued pass, not used for advertising or tracking.
After expiry or account deletion, Clubfold makes a redacted void pass available and notifies registered Wallet devices. Updates depend on Apple and the device connecting; we cannot guarantee immediate changes or erase a previously downloaded copy remotely. After account deletion, a minimal opaque pass identifier, update credential and device delivery registration remain for up to 90 days to deliver the void update, then are removed. No member name, benefits or entry QR remain in that tombstone.
Providers may process data outside the EEA. Their data-processing agreements describe applicable transfer safeguards, including standard contractual clauses or applicable adequacy frameworks. Contact us for information relevant to your request.
Storage, retention and deletion
Account, membership, booking and conversation records remain while they are needed for your account and club relationships. You may request deletion from your profile or contact us. Sign-in access is removed first; a retryable background process then removes your profile, memberships, bookings, saved event choices, attendance, conversations, push subscriptions, club-email preferences, personal notifications and remaining authentication credentials. Authored staff messages, staff identifiers in attendance records and payment-order records are anonymized. Administrative audit events retain their action, timestamp, affected record and recorded reason; the deleted operator’s account identifier and email are anonymized. Matching email targets of operator-access grants or revocations are anonymized when the deleting account’s email was verified. Paid memberships must be canceled, pending payments resolved and clubs with active members or upcoming reservations transferred before deletion.
Some records may need to be retained to meet legal obligations or resolve claims, and providers may retain limited records under their own retention policies. Deletion from the active app is distinct from expiry of provider backups. We can explain the applicable retention circumstances when handling a request.
Your rights
Subject to the applicable conditions, you may request access, correction, erasure, restriction, portability or object to processing based on legitimate interests. You can withdraw consent for optional features without affecting the lawfulness of earlier processing. We may need to verify that a request comes from the account holder.
Email contact@x70.one to exercise your rights. You can also complain to a competent data-protection authority, including the Bavarian State Office for Data Protection Supervision (BayLDA).