THISWKNEW YORK
THE FINE PRINT · UPDATED SEPTEMBER 20, 2026

Your city.
Your information.

Private planning should stay private. Here is what the platform stores, what sharing means, and what a place on the guest list does—and does not—promise.

What we keep

  • Your account: email, a pseudonymous handle, an optional private greeting name, password hash, sessions, and account-recovery/verification records. New passwords use scrypt; older bcrypt hashes upgrade after a successful login. Passwords are not stored in readable form.
  • Your taste and activity: preferences, saved/passed events, ranking positions associated with those actions, and outbound listing clicks. Historical accounts may retain previously generated weekly introductions.
  • Your people and plans: follows, blocks, custom lists, notes, gang membership, invitations, join requests and decisions, removal records, proposals, votes, sharing permissions, and gang chat messages.
  • Your gatherings: host descriptions, capacity and timing, arrival details, requests and their notes, and approval decisions.
  • Security records: hashed identifiers and timestamps used to limit authentication and social abuse. Infrastructure may also retain routine request logs and backups.

These records operate your account, personalize discovery, coordinate plans, manage access, and protect the service. We do not request your contacts or browser location. Public and discovery pages use Google Analytics to measure visits; sign-in, account, people, list, gang, chat, invitation, request, and reset pages do not load it. The app has no advertising pixels.

Private does not mean unshareable

Your handle is how other people find you; your email and private greeting name are not shown to them. Following lists are private and do not grant access to anyone's plans. Personal lists are private by default. Gang lists, notes, and votes are visible to current gang members. An optional read-only link exposes the list's title, description, and events to anyone who has it—not private notes, membership, or votes. Links expire and can be revoked.

Gang link previews can reveal the name, introduction and headcount, but not the roster, plans or chat. Every member can invite; addressed invitations require the recipient's acceptance. Request links require owner approval. Chat is plain text with HTTP(S) links, without attachments or link previews. Only current members can access it, and new or returning members see messages from their current join time onward. Chat is access-controlled, not end-to-end encrypted.

Leaving or removal stops future access. Removed members need owner approval to return. Blocking removes follows and prevents direct invitations between the pair, but does not change a gang you already share. Revocation cannot erase screenshots, copied links, downloads, or information someone already saw. Share thoughtfully; don't put sensitive personal information in descriptions or chat.

Who receives information

  • People you collaborate with: gang members see shared planning activity and the chat they are entitled to read, labelled with pseudonymous handles; hosts see requests and handles, not account emails or private greeting names. A host's arrival details are shown only to that host and approved guests while the gathering is published.
  • Source websites: event images load from their original hosts, which receive normal image requests such as your IP address. Outbound ticket/listing and chat links leave this site. We send no referrer, but those sites have their own policies. Member hosts cannot embed arbitrary remote tracking images in gathering pages.
  • Google Analytics: on public and discovery pages, Google receives the page address, your IP address, browser details, and its measurement cookie identifier. We do not send it your email, name, lists, or plans. Private pages never load it. You can block it with a content blocker or Google's opt-out add-on without losing any feature.
  • Mail infrastructure: when configured, the transactional email provider receives the recipient address and account-recovery or verification message. If mail is unavailable, the account screens say so.
  • Editorial processing: configured AI/search providers process event-source material for discovery and curation. Current web page views do not send your private lists, gang notes, chat, or account profile to an AI provider.

The interface uses system fonts and locally served artwork. Account and planning records live in the application's database. We do not sell account or planning data.

Cookies and security

There are two functional cookies: a session cookie to keep you signed in and a signed CSRF cookie to protect forms. Both expire after 30 days. The session cookie is HttpOnly; production deployments must use HTTPS and Secure cookies. On pages that load Google Analytics, Google also sets its own measurement cookies (such as _ga), which last up to two years.

No service can promise absolute security. Use a unique password, protect invitation and reset links, and revoke other sessions from your account if needed.

Your controls

Your account offers handle changes, an authorized data export, password change, other-session revocation, and account deletion with password confirmation. You can also unfollow or block people, remove saves, delete lists, revoke links, withdraw join requests, and leave gangs. Owners transfer ownership before leaving, or delete the gang. Chat authors can remove their accessible messages; owners can moderate messages they can see. Removed text is erased from live chat, though deletion records remain to update open rooms.

Account deletion removes your login, private lists, and owned gatherings. Shared gangs pass to their longest-standing remaining member; gangs with nobody else are deleted. Shared plans and chat can remain without your account attached, as can anonymous click records. Former-member chat is not available through your export. The deletion screen explains the affected records before confirmation. Previously copied information and infrastructure backups are not instantly erased by deleting the live account.

A good plan is not a reservation

Editorial listings link to third parties. Dates, prices, availability, and cancellation status can change; confirm with the original source before traveling. Saving an event or locking a gang plan does not buy tickets, reserve a table, or guarantee entry.

Guest-list gatherings are independently hosted by members, not verified or endorsed by THIS WK. A pending request is not admission. Hosts choose whom to approve within their stated capacity and may withdraw approval or cancel. Approval is personal and not transferable; it is not a paid ticket or a guarantee of the host's conduct. No payments are collected here.

Check your request page for status changes; the platform does not currently send gathering-status notifications. Respect a host's private address, don't forward arrival details, and don't attend without approval. Meet with ordinary care and contact local emergency services for urgent safety issues.

Use the platform responsibly

Do not impersonate people, spam hosts, publish misleading events, harass others, probe private accounts, or overload the service. Event names and source artwork belong to their respective owners. THIS WK is not affiliated with those venues, ticketing services, or Instagram. The service and third-party listings are provided as available, without a guarantee of uninterrupted access or event accuracy.

← Back to the city