Privacy Policy
Last updated 12 May 2026.
What we collect
- Full name
- Phone number (used as the unique identifier and for retrieval)
- T-shirt size and affiliation
- Optional: email address, workplace ID
How we use it
To process your registration, assign a bib number on approval, communicate event updates, and produce the participant roster. We do not sell or rent your data.
Retention
Personal data is retained for 90 days after the event date for reconciliation and reporting. After 90 days, phone numbers are hashed and email/workplace-ID fields are cleared. Aggregate statistics (counts, affiliations, t-shirt sizes) are kept indefinitely for historical reporting.
Your rights
To request deletion of your registration data before the 90-day window, email privacy@et8kmrun.et from the email associated with your registration (if you provided one) or from any verifiable address along with the phone number you registered.
Sub-processors
- Supabase (database + auth) — EU region
- Vercel (hosting) — EU region
- Cloudflare Turnstile (bot protection)
- Resend (email delivery)
- Sentry (error tracking)
- Meta (Facebook/Instagram) — ad measurement (Conversions API + Pixel)
Data sharing
When you accept cookies, we load Meta's (Facebook/Instagram) Pixel in your browser, which sends Meta an event when you complete a registration so we can measure how our ads reach runners. You can decline this on the cookie banner; declining does not affect your registration.
When you submit a registration form, we additionally send Meta a hashed (irreversible) copy of your phone number, name, and country via our server (server-side measurement). This happens regardless of cookie consent because submitting the form is an active, intentional action — but the data shared is hashed values, never the raw form fields. If your browser has Meta's _fbp or _fbc cookies set (from accepting our cookie banner, or from clicking a Meta-served ad elsewhere), we forward those as well so Meta can match the event to its records.