Privacy

Scope and operator

This notice covers the MazelMeet website, country and city waitlist, Yenta interest form, referral links, and table feedback. It does not cover a public mobile app, payments, live matching, or messaging. MazelMeet operates this waitlist. Contact privacy@mazelmeet.com for any privacy request.

The service is open to adults age 18 and older. It is culturally focused on Jewish community life and does not require a particular religious identity or level of observance.

Information we collect

Identifiers and contact information: first name, email address, and an optional phone number. Location: required country and city plus an optional neighborhood or area, never a street address. Characteristics and preferences: age, optional gender, optional observance level, the lanes you choose, table and venue preferences, hosting interest, language, and an optional vouch name.

Before email confirmation, D1 stores only a keyed hash of the address, request type, interface language, issue time, expiry, and one-time status. The form answers travel in an authenticated encrypted link and are not stored in the pending table. After confirmation, waitlist operations include referral codes, referral source, signup source, country cohort progress, city-scoped seat position, status, consent document versions, consent timestamps, and whether you separately asked for launch email. The connecting IP address is written to a short-lived rate-limit log and automatically pruned after two hours. We do not use advertising trackers or third-party analytics cookies on this site.

Table feedback is tied to a table token and a one-way IP-derived deduplication value. It does not ask for your name or email. Administrative notes may be added by the small operations team when coordinating a table or responding to a request.

A business partnership inquiry may include the business and contact names, business email, optional phone and website, country, city, partnership interests, message, language, source, security check, and our follow-up status. The inquiry form does not ask for member information.

Why we use it

We use the information to count the First 100 interest cohort in each country, save and display your city-scoped seat, measure which cities are ready, plan the first tables and introductions, identify potential hosts and yentas, attribute referrals, prevent spam and abuse, answer support and privacy requests, and send confirmation or launch email only when the relevant permission exists.

We use business inquiry information only to review the request, prevent abuse, reply, prepare a proposal when appropriate, and keep a limited operational record of the conversation. A business cannot buy access to member identities or influence who is matched with whom.

We do not make legal or similarly significant decisions about you. The waitlist does not run live automated matching. Before the app launches, its AI, matching, moderation, safety, and payment practices will receive a separate notice and consent flow.

Sensitive information and consent

On a Jewish-focused service, an intent, observance level, Shabbat Table preference, hosting choice, or yenta interest may reveal religious beliefs. California treats religious beliefs as sensitive personal information, and some other jurisdictions give the same data additional protection.

We collect those choices only after a separate, unchecked, explicit consent and save them to the active list only after mailbox confirmation. The waitlist stores the consent purpose, notice version, locale, and time. Marketing permission is separate and optional. Withdrawing marketing permission does not remove your seat. Withdrawing sensitive-data consent requires us to stop using those choices, so the simplest current flow is verified deletion of the waitlist record.

Service providers and disclosures

Cloudflare hosts the site, Pages Functions, security layer, and D1 database. Resend delivers mailbox confirmation, requested waitlist, and verified deletion email only when outbound email is configured. These providers process information to perform those services. We may also disclose information when required by law, to protect safety and rights, or as part of a business transaction with appropriate notice and protections.

The current waitlist does not disclose your profile choices to restaurants, hosts, guests, yentas, advertisers, or data brokers. Later table and app disclosures will require a new notice before those features go live.

No sale or behavioral advertising

We have not sold personal information or shared it for cross-context behavioral advertising in the preceding 12 months. We do not use personal information to target ads. If that practice ever changes, this notice and the required opt-out controls must change before the practice begins.

Retention and deletion

Mailbox confirmation links expire after 30 minutes. The pending D1 row contains no form answers or raw email address. Active waitlist records are kept while the city waitlist is operating, until you withdraw, or until they are no longer needed for the stated purposes. Each partnership inquiry receives a retention review date 24 months after receipt or the last meaningful follow-up. The owner reviews and deletes expired inquiries manually; automatic cleanup is not active. Rate-limit IP rows are pruned after two hours. Consent and verified-request audit records may be retained for up to five years without the form answers, so we can demonstrate that a request was handled.

A verified deletion removes matching waitlist and yenta rows, table assignments tied to the signup, and referral linkage from the active D1 database. We complete verified requests within 30 days. Cloudflare recovery copies age out according to its backup and Time Travel lifecycle and are not used for ordinary processing.

Your choices and California rights

Every waitlist member may ask to access, correct, or delete their information, withdraw consent, or unsubscribe from marketing. California residents may also have rights to know categories and specific pieces, correct inaccurate information, delete, limit certain uses of sensitive information, opt out of sale or sharing, use an authorized agent, and receive equal service when exercising a right. We offer the same basic request path regardless of location.

Use the verified deletion form below or email from the address used to join. We may ask for reasonable verification before disclosing or changing data. An authorized agent must provide authority and we may still verify directly with the member. We answer requests without charging a fee unless the law permits one for excessive requests.

Security and international processing

Cloudflare D1 encrypts database objects at rest with AES-256 and secures transfers with TLS. Administrative routes use server-side sessions, CSRF controls, parameterized queries, and access restrictions. No service can promise perfect security, and we will update this notice and provide legally required notices if a qualifying incident occurs.

Cloudflare and Resend may process data in the United States and other locations where they operate. People outside the United States receive the same consent and deletion controls on this waitlist. Market-specific app launches remain unavailable until the required transfer and local representation safeguards are in place.

Adults, changes, and contact

MazelMeet is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor submitted information, contact us and we will investigate and delete it.

We will update the date above when this notice changes and will email opted-in members before a material change takes effect. Privacy questions, access or correction requests, complaints, and consent withdrawals may be sent to privacy@mazelmeet.com.