This policy explains what Stage 2 Ltd., as the operator of Shmuzin, collects when you use Shmuzin, why we collect it, and who can see it. Shmuzin is built around a simple idea: your plans are visible only to people you have chosen to trust. We do not sell your data, we do not show advertising, and we do not use your information to build advertising profiles.
1. Information you give us
Account details — first and last name, an optional display name, and your email address. If you register with a password we store only a bcrypt hash of it, never the password itself. If you sign in with Google we store your Google account identifier and do not receive or store a password at all.
Profile details — optionally your city, neighbourhood or area, phone number, and a profile image.
Plans — the dates, meals, roles (hosting or being hosted), group format, location, notes, and visibility settings you enter.
Network — the connections you form and the invitations you send or receive, including an invitee’s email address where you supply one.
Content — recipes, shared menu items, and any feedback you submit.
Preferences — your notification settings and default plan settings.
2. Information collected automatically
Session cookie — a signed cookie that keeps you logged in. It is strictly necessary for the service to work; Shmuzin sets no advertising or analytics cookies.
Notifications and activity — records of matches, reminders, and invitations generated for your account, so the app can show them to you.
Server logs — our hosting provider records standard request information, including IP addresses, for security and reliability. We also count recent sign-in and registration attempts per IP address to block brute-force attacks.
3. Who can see your information
People in your trusted network can see your name, the profile details you choose to fill in, and any plans you publish to your network.
A matched household sees your name and the details of the shared plan so you can coordinate.
Nobody else. There is no public directory, no browsing, and no feed of strangers. Shmuzin never reveals who else was considered for a match, or anyone’s position in the matching queue.
4. Service providers
We keep the list of third parties deliberately short. Shmuzin is hosted on Render, in the United States (Oregon), which stores the application and its database on our behalf. If you choose to sign in with Google, Google processes that authentication and tells us your email address, name, profile picture, and whether the email is verified. We do not send Google any information about your plans or your network.
5. How long we keep information
We keep your account information for as long as your account exists. Plans and matches are retained as part of your history so both households can refer back to what was agreed. Server logs are retained for a limited period by our hosting provider for security purposes.
6. Your choices and rights
Access and correction — you can view and edit your profile, plans, and preferences in the app at any time.
Notifications — you can turn individual notification types on or off in settings.
Disconnecting — removing a connection stops future matching with that person.
Deletion — write to privacy@shmuzin.com to request deletion of your account. We will delete your profile and plans. Where a record is shared with another user — a past match, for example — we may retain the minimum needed to keep their history intact.
Depending on where you live, you may have additional rights over your personal data, such as the right to a copy of it or to object to certain processing. Contact us and we will do our best to honour them.
7. Security
Traffic is encrypted in transit with TLS. Passwords are stored only as bcrypt hashes. The database is not reachable from the public internet — only the application itself can connect to it. No system is perfectly secure, and Shmuzin is beta software; please do not store sensitive information in free-text fields such as plan notes or feedback.
8. Children
Shmuzin is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
9. Changes
If we change this policy we will update the effective date above and, for material changes, notify you in the app.