Privacy policy
What we collect, why, and what we do with it.
Last updated: October 13, 2026
In short
First Proof is a small, volunteer-run conference. We collect what we need to run the board, registration, and the day itself, and nothing else. We don't sell or rent your information, and we don't run advertising. You can unsubscribe from our emails with one click and ask us to delete your account at any time.
What we collect
Everything here is something you type in yourself:
- Mailing list: your name, email address, and whether you're a printer, book artist, student, or something else.
- Signing in: your email address. We email you a one-time link instead of using passwords, and a cookie keeps you signed in on that device.
- The board: the notes you post, the stickers and reactions you add, and your comments. Notes and comments show your first name to other signed-in people. Visitors who aren't signed in see a few notes without names.
- Sessions: if you lead one, what you write about it and any files you upload for it. Comments you post on a session page show your first name to other attendees.
- Registration: your name, organization, pronouns, dietary needs, your answers about the lightning share-out and print exchange, your photo consent, and your attendance commitment. We record whether you've paid and whether you checked in on the day.
- Payment: handled by Stripe. We never see or store your card number. We keep Stripe's reference for your payment so we can issue refunds and, if it applies, charge the no-show fee described in the refund policy.
- Scholarship applications: your university, program, and the short answer you write about why you want to come.
- Feedback: answers to the after-event survey, which are stored without your name or email.
How we use it
- To run the board and build the day's sessions from what people want to learn.
- To process registrations, review applications, and plan food, materials, and space.
- To email you: sign-in links and receipts when you ask for them, and news and a monthly board digest if you're on the mailing list.
- To make name badges and the day's rosters.
- To answer your questions and improve the event.
Emails and unsubscribing
Every news email and digest has an unsubscribe link at the bottom, and most mail apps show their own unsubscribe button for them too. Unsubscribing stops news and digests. Sign-in links and receipts still arrive, because you ask for those yourself. Signing up again, on the site or the board, re-subscribes you.
Our emails record whether they were delivered, opened, and which links were clicked, through a tracking image and tracked links. We use this to see what people find useful and to stop sending to addresses that bounce. Blocking remote images in your mail app stops open tracking.
Who else sees it
We don't sell, trade, or rent your information. It is shared only with:
- Services that run the site: Cloudflare hosts the site and the database. Stripe takes payments. Resend sends our email. Plausible gives us visitor counts without cookies or personal data.
- Organizers: the small group of people running the event can see registrations, applications, and the board in order to run it.
- Other attendees: your first name on the board, and your name on your badge on the day. Nothing else unless you share it yourself.
- When the law requires it.
Cookies
We set one cookie, to keep you signed in after you use a sign-in link. It lasts 30 days and holds nothing but a signed reference to your account. Our analytics (Plausible) use no cookies. There are no advertising or tracking cookies.
How long we keep it
Board content, registrations, and applications are kept so returning people don't have to start over and so we can see how the event grows year to year. Ask and we'll delete your account and everything attached to it. Notes you posted are removed from the board when you're deleted.
Your choices
- See what we hold about you, or have it corrected: email us.
- Delete your account: email us and we'll do it.
- Stop news emails: use the unsubscribe link in any of them.
- Remove a note or comment you posted: email us.
Security
The site runs over HTTPS. Sign-in links work once and expire within an hour. Payment details never touch our servers. No system is perfectly secure, but we keep what we hold small and treat it carefully.
Children
The site and the event are for people 16 and older. We don't knowingly collect information from anyone younger.
Changes
If this policy changes, the new version goes up here with a new date at the top.
Contact
Questions about any of this? Email contact@firstproofconference.com.