Privacy Policy
Last updated: 22 June 2026 (version 2026-06-22)
This Privacy Policy explains how We Will Go ("we", "us", the "Platform") collects, uses, and protects your personal data when you use our website, and the rights you have under the EU General Data Protection Regulation (GDPR) and Latvian law.
Who we are (data controller)
We Will Go operates this Platform and is the controller responsible for your personal data. For any privacy matter, including the requests described below, contact us at [email protected].
What data we collect
Account data you provide when registering: your name, email address, and a securely hashed password. Authentication and session data: cookies and tokens that keep you signed in. For administrator accounts only, two-factor authentication (2FA) data, such as your authenticator secret and recovery codes. If you sign in with Google, the basic profile information Google returns (your name, email, and Google account identifier). Location data: your approximate location, only if you grant your browser's location permission, used to show events near you. Content you submit: for publishers, the events, descriptions, and images you post. Technical data automatically recorded for security and reliability: IP address, device and browser information, and server logs.
How we use your data and our legal bases
We process your data to: provide and secure your account and keep you signed in (necessary to perform our contract with you, GDPR Art. 6(1)(b)); operate the Platform, prevent fraud and abuse — including verifying you are not a bot via hCaptcha — and keep it reliable and secure (our legitimate interests, Art. 6(1)(f)); show you events relevant to your location, and, if you opt in through the cookie banner, understand site usage via Google Analytics (your consent, Art. 6(1)(a)); and comply with our legal obligations (Art. 6(1)(c)). We do not use advertising or cross-site tracking cookies, and we do not sell your personal data.
Cookies
We use essential cookies needed to sign you in, remember your preferences, and protect forms from bots (hCaptcha). With your consent, given through the cookie banner, we also use Google Analytics cookies to understand how visitors use the site; these are never set before you opt in, and you can withdraw consent at any time by reopening the cookie banner. We do not use advertising cookies. A full list of cookies, their purpose, and how to manage them is set out in our Cookie Policy.
Push notifications
If you choose to enable push notifications, your browser generates a unique push subscription endpoint — a device-specific token issued by your browser vendor (for example, Google or Apple) — which we store linked to your account. We use this token solely to send you notifications about new events in the categories you follow. The legal basis for this processing is your explicit consent, given through your browser's permission prompt and confirmed in your account settings (GDPR Art. 6(1)(a)). You can withdraw this consent at any time by disabling notifications in your cabinet (Profile → Notifications) or by revoking the browser permission in your device settings; withdrawal does not affect any processing carried out before that point. Push subscription tokens are deleted when you disable notifications or close your account.
Signing in with Google
If you choose "Sign in with Google", Google Identity Services loads in your browser and Google processes your sign-in under its own privacy policy. We receive only the basic profile information needed to create or access your account. We have no access to your Google password. We use this data solely to authenticate you.
Who we share data with
We share personal data only with service providers (processors) who help us run the Platform, and only as needed: Google (authentication, when you use Google sign-in; and, only if you consent via the cookie banner, analytics through Google Analytics); hCaptcha, which receives your IP address on sign-up and password-reset forms to verify you are not a bot; our map and map-tile provider, which receives your IP address to serve maps; and our hosting and infrastructure providers, which store the Platform's data on our behalf. These providers act on our instructions. We may also disclose data where required by law.
International data transfers
Some of our service providers may process data outside the European Economic Area. Where they do, the transfer is protected by an adequacy decision or by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep your data
We keep your account data for as long as your account is active. Session tokens are short-lived: staff (administrator and publisher) sessions log out after a short period of inactivity, while regular users stay signed in for up to 30 days. Server logs are kept for a limited period for security. When you close your account, we delete or anonymise your personal data unless we must retain it to meet a legal obligation.
How we protect your data
We use industry-standard safeguards: passwords are stored only as secure hashes, session cookies are protected with the SameSite attribute, and access to the platform is served over encrypted connections. Staff sessions automatically time out after inactivity, and administrator accounts are additionally protected by mandatory two-factor authentication.
Your rights
Under the GDPR you have the right to access your personal data; to rectify inaccurate data; to erase your data; to restrict or object to processing; to data portability; and to withdraw consent (for example, by turning off your browser's location permission) at any time without affecting prior processing. To exercise any of these rights, contact us at [email protected]. We will respond within the time limits set by law.
Children
The Platform is not directed at children, and we do not knowingly collect personal data from children below the age of digital consent. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. Each version is dated and kept available; the current version always applies. We will indicate the date of the latest update at the top of this page.
Contact and complaints
For any question about this policy or your personal data, contact us at [email protected]. If you believe we have not handled your data lawfully, you also have the right to lodge a complaint with the Latvian supervisory authority, the Data State Inspectorate (Datu valsts inspekcija), at www.dvi.gov.lv.