Culture Shock runs events in Baghdad and operates this site at cultureshock.wtf. This policy explains what we collect when you register for a night, what we do with it, and how you get rid of it.
We are the data controller. Reach us any time at info@cultureshock.wtf.
We use Google Sign-In. Google gives us your name, email address, profile picture and a Google account identifier. We never see or store your Google password.
Before your first event you are asked for a display name, gender, phone number, WhatsApp number and Instagram handle. You may replace the Google profile picture with your own. Your WhatsApp number and Instagram handle must be unique to you — we use them to stop duplicate registrations.
We store your registration, a QR code that acts as your ticket, your ticket tier, any group name, your waitlist position, and — on the night — your check-in time and how many drinks or food items you were served against your allowance. Door and bar scans are logged.
We store the amount, currency, a reference code, the payment status and the screenshot you upload as proof of transfer. We do not collect or store card numbers. Payments are settled outside this site.
Posts, comments, votes, photos, stories and survey answers you submit are stored with your account. Story views and likes are recorded so posters can see engagement.
If we link an artist profile to your account, anything you add there — bio, photographs, track and mix links, social handles, booking email — is stored and, once we publish it, is public.
If you join our Telegram channel through a link we generate, we record your Telegram user ID, username and display name so we can approve you. If you enable browser or app notifications we store the push subscription your device issues. If phone verification is switched on we store a temporary one-time code against your number; it expires within minutes.
A login session cookie keeps you signed in. Our server keeps ordinary request logs. We do not run advertising trackers, and we do not track your location.
We do not sell your data and we do not share it for anyone else's advertising. It reaches third parties only where the service requires it:
We will disclose data where the law requires it.
Your account and its registration history stay until you ask us to delete them. Payment records are kept for our own accounting. One-time verification codes are discarded on use or expiry. Stories are purged automatically after they expire.
The site is served over HTTPS. Access to the admin panel is restricted to named accounts. No system is perfect; if we discover a breach affecting you, we will tell you.
Our events are for adults. This site is not intended for anyone under 18, and we do not knowingly keep data about them. If you believe a minor has registered, tell us and we will remove the account.
If this policy changes we will update the date at the top of this page.
Questions, requests or complaints: info@cultureshock.wtf. We answer within 30 days.