Privacy

Updated November 3, 2026

YouFree is a personal guest guide maintained by its hosts. This page explains the information used to run the guide.

Sign-in and account information

Auth0 handles sign-in. Depending on the sign-in option you choose, Auth0 may receive your name, email address, profile picture, and a unique account identifier from your identity provider. YouFree uses the unique identifier to find your checklist, and your name or email when available to label your account. An email address is not used to automatically combine separate sign-in identities.

Passwords are handled by Auth0; the YouFree app database does not store your password. Social sign-in requests basic profile and email information. It does not request access to your messages, contacts, calendar, or files.

When available, YouFree keeps your provider profile-picture URL in your encrypted sign-in session and shows that photo in your own profile button. Your browser loads it from the provider's HTTPS image host without sending the guide's page address as a referrer. The image host receives normal connection information, such as your IP address. The guide does not share your provider photo with friends.

You can choose a profile photo beside your display name in Your profile. Your browser crops and resizes it before upload; YouFree stores the small image with your profile and shows it to you and your accepted friends across all three guides. The original file is not uploaded. You can replace it or reset to your sign-in photo (or initial) at any time. Removing a friendship stops future access to the chosen photo; previously viewed images cannot be recalled.

The three guides

YouFr.ee? (activities), WannaE.at? (restaurants), and WheresA.Bar? (bars) use the same personal YouFree account and database. Signing in with the same identity brings back the same saved places. A venue appearing in more than one guide shares one checkoff and rating. Each domain keeps its own essential sign-in cookies.

Your checklist and ratings

The catalog and map can be browsed without an account. The app stores your Want to go and Not interested choices, completed visits, and ratings under your account identifier. Want to go and Not interested stay private and are not shared with friends. Public browsing does not reveal ratings, account details, or personal checklists. Average stars shown after sign-in include only your accepted direct friends; your own rating is separate. The hosts can access stored data when maintaining the guide or helping with an account.

Place suggestions

When you suggest a place, we save the point you deliberately select on the map, the place details you enter, your account identifier, and the submission time. Hosts and authorized guide admins review suggestions and keep the original details, decision, reviewer identifier, time, and private review notes. Pending and rejected suggestions stay private. Approved place information and coordinates become part of the public catalog; your account identifier and private review notes are not published. Your device location is not attached to suggestions. Avoid putting personal information in place details.

Friends and invitations

Accepting a friendship shares both people’s past and future checkoffs and star ratings across all three guides and areas. Friends see your chosen display name and uploaded profile photo, completion summaries, and individual ratings, but not your email, account details, friends list, or device location. Either person can remove the friendship to stop future access. Previously viewed information cannot be recalled.

Invitation emails are sent using Cloudflare Email Service. We store the sender, delivery address, invitation status and expiry, and encrypted delivery jobs. The address is visible only to the sender who entered it. An invitation link can be accepted using any signed-in account; a matching provider-verified email can also surface it in the app. Invitation discovery does not itself combine identities. Invitations expire after seven days; terminal invitation data is deleted within 30 days. Durable delivery limits protect senders and recipients from invitation spam.

Service providers and cookies

Cloudflare hosts the app and its database, and Auth0 provides authentication. These services process connection and security information to operate and protect the service. Essential session cookies keep you signed in and protect the sign-in process. A short-lived encrypted invitation cookie lets you return to an invitation after signing in; opening a link or signing in does not accept a friendship.

The map loads tiles from OpenStreetMap. Loading the map sends normal network information, such as your IP address and requested map tiles, to the tile service. The guide silently checks whether location access is already granted and, if so, resumes location automatically when you open it. Otherwise, it requests device location only when you tap its location pin. With your permission, it uses that location to order places and filter them by distance, updating while the guide is open. Location coordinates stay in your browser’s memory; YouFree does not send them to its server or save them to your account. You can browse the guide without sharing your location; distance controls and labels appear only when a location is available.

YouFree does not run advertising or analytics tracking scripts. We do not sell your personal information or use Google account data for advertising. Google account information is used to provide sign-in and account features in accordance with the Google API Services User Data Policy, including its Limited Use requirements.

Retention and deletion

Your saved account and checklist data remain available so you can return to the guide. You can change your checkoffs and ratings in the app. Private suggestions and review records remain available for host moderation until removed, including through a verified account-deletion request. Approved public place listings can remain after their submission record is removed. To request deletion of your account and stored checklist, follow the deletion instructions. Deleting ratings also removes them from friends’ averages. Provider logs and backups may remain for their normal retention periods.

Contact

For privacy questions or account help, contact codingparadox@gmail.com.