Privacy

Sin the Bottle Applications is the event application site. Applicants submit a form, moderators review. Email goes via Resend. Sign-in is for moderators only via Lotl Auth.

Applicants never sign in; submissions are tied to an email and an opaque /my/:token review link. Moderator review and admin actions require an admin-flagged Lotl Auth JWT. Status-change emails to applicants and new-application notifications to moderators are sent via Resend.

What we collect

We collect and store the following kinds of data, each with its own retention and legal basis:

Moderator account — Your sign-in identity is managed by Lotl Auth, our authentication service (auth.lotlsoft.com). Lotl Auth stores your email, your name if you provided one, and a hash of your password (argon2id). Sign-in issues a short-lived JWT access token (15 minutes) and a refresh token (30 days). Email verification and password resets go through transactional email (Resend).Stored on our server. Kept until you delete it. Legal basis: contract (needed to run the service). Removable when you delete your account. Shared with: Lotl Auth.
Event applications — Each application: applicant name, contact email, application answers (sensitive personal information about play preferences, references, and consent acknowledgements), current status (pending / approved / waitlisted / declined), and an opaque review token (`/my/:token`) the applicant uses to revisit their submission.Stored on our server. Kept until you delete it. Applications are retained for the lifetime of the event plus a moderator-discretion window. Applicants may request deletion at any time. Legal basis: consent. Removable when you delete your account. Shared with: Resend.
Events — Event listings created by moderators (name, start time, capacity, status, description, public host info). Public-facing; not user-identifying.Stored on our server. Kept until you delete it. Legal basis: legitimate interests. Removable when you delete your account.
Usage telemetry — Page views, application-submission events, and crash reports sent to Lotl Observe. Does not include application contents.Stored on our server. Kept permanently. Legal basis: legitimate interests. Not individually deletable. Shared with: Lotl Observe.
Waitlist and host enquiries — Opt-in email + (optional) fetlife username from the waitlist sign-up form, plus host intake submissions forwarded to the moderator. Waitlist entries are stored server-side; host intake is forwarded via email and never persisted.Stored on our server. Kept until you delete it. Waitlist entries are kept until the user requests deletion or the host pool is wound down. Legal basis: consent. Removable when you delete your account. Shared with: Resend.

Third parties

These external services receive some of your data:

DigitalOcean — server hosting for the apply.sinthebottle.com service
Resend — Transactional email (application status updates to applicants, new-application notifications to moderators)

Your rights

You can export everything we hold about you, and delete your account at any time. Both options live in your account settings. Deletion is immediate and unrecoverable.

Last updated: 2026-05-27.