This document details the information we collect or have previously collected from users of the Telegram bot @FoxPartiesRegBot as well as how we use it. We reserve the right to update this document at any time without reaching out to inform you personally.
The @FoxPartiesRegBot system allows users to queue for our events, amass points, and facilitates donations among other features. This system will require you to register with our bot to interact with these features. Registration will require sending some personal information including your date of birth. We also request your email, as well as a digital Smart Health Card compatible Covid vaccination QR code. Those two items are currently optional.
We store a one way hash of your dob.
This will be hashed with argon2 and given a strong pepper value as well as a unique salt.
Argon2 can be a very slow hashing algorithm, this makes it very hard to crack. We have it set to values that take around 1s per attempt on our client machines. We also protect our pepper by only storing it in ram rather then allowing it to live on disk.
We store an argon2 hash of your email with pepper if you provide it to us. This is used to associate donations on Patreon and PayPal to your account and is optional.
We store rough estimates of your first and last Covid doses if you provide it to us. We have lowered the resolution of our stored data to 2 week accuracy for privacy. This will be used to ask for updated information if required.
We store when you last updated your information with us. This can be used in the future to confirm with you that your information has not changed prior to entering the queue.
We store how many times you have changed your email, how many times you have updated your id information, an internal unique user id, and if you are an admin or not.
We store your telegram ID. This is used to allow the bot to recognize you when you message it as well as send you out of band messages like those you are sent when it is your turn to come to the event.
We store information on donations we receive including:
What type of donation it is, how much it is for, when it was created, when it was processed, if we’ve awarded points for this, who we have credited the donation to (if anyone), an argon2 hash of the email associated with this donation (if any), an api ID from (stripe, PayPal, ourselves) where needed.
This information is used to issue points on donations and provide auditing.
We store information on our events such as name, description, and capacity which is provided solely by fox party administration.
We store virtual queues in the form of a list of entries. Each entry contains the internal user id, which event the entry is for, the time it was entered, the state of the entry, the time the state was entered, and an optional argon2 hashed team name for those entering as a team.
This information is required to run the virtual queue.
On site our client device runs full disk encryption protected by 2fa (something you have and something you know). We will be storing an encrypted log of the argon2 values we scan in on site and reserve the right to use this information to help create and enforce bans on participants who violate on site rules.
For an open discussion on what this means and how we can work together to best protect your information please visit our beta tester channel.