# Privacy Policy

Last updated 27 September 2026

What personal information laravelbd.com collects, why we need it, who we share it with, and how you can have it corrected or deleted.

## Who we are

laravelbd.com is run by Laravel Bangladesh, a volunteer-run community of Laravel developers. It is not a company. For any question or request about your data, email management@laravelbd.com.

## What we collect

- Account: your name, email address and preferred language. We never ask for a password.
- Login: when you ask for a login code or magic link, we store your email address, name, IP address and a one-way hash of the code. If you add a passkey, we store its public key and when it was last used. The private key never leaves your device.
- Events: your registrations and your answers to an event's registration questions.
- Talk proposals: the titles, abstracts and notes you submit to a call for papers.
- Directory profile: if you create one, the name, title, company, city, bio, photo and links you add.
- Technical data: your IP address, browser details and the pages you request, recorded in your session and in our server logs.

## How we use it

- to log you in and keep you logged in
- to organise the events you register for
- to review the talk proposals you submit
- to publish your directory profile
- to protect the site from abuse, for example by limiting repeated login attempts
- to understand how many people visit and which pages they use

We do not sell your information or use it for advertising.

## What is public

Your directory profile, once published, and speaker details for talks you give are visible to everyone and may appear in search engines. Your email address, registrations, registration answers and talk proposals are visible only to you and to the community staff who run the site.

## Cookies

We only use cookies the site needs to work: a session cookie that keeps you logged in, and a security token that protects forms against forged requests. Cloudflare may set cookies of its own to protect the site from bots. We do not use advertising or cross-site tracking cookies.

## Services we rely on

- Cloudflare: all traffic to the site passes through Cloudflare's network, which protects and speeds it up. Cloudflare also gives us visitor statistics without using cookies, and stores the images you upload.
- Email delivery: an email provider sends login codes, magic links and account emails on our behalf.
- YouTube: some videos on the site are embedded from YouTube. When a page with an embedded video loads, YouTube, which is owned by Google, may collect information about you under its own privacy policy.

These providers may process your information outside Bangladesh.

## How long we keep it

Login codes and magic links expire after 15 minutes. Your session ends after 2 hours of inactivity. Server logs are kept only as long as we need them to run and secure the site. Your account information is kept until you ask us to delete your account.

## Your choices

- Change your name, email address and language, and manage your passkeys, in your account settings.
- Edit your directory profile from your account.
- Email management@laravelbd.com to get a copy of your information, have it corrected, or have your account and its data deleted.

## Security

The site is only served over HTTPS, login never uses passwords, login codes are stored only as hashes, and access to personal information is limited to community staff. No system is perfectly secure, so if you notice a problem, please tell us.

## Children

The site is not meant for children under 13. If we learn that a child under 13 has created an account, we will delete it.

## Changes to this policy

We may update this policy. When we do, we change the date at the top of this page.

## Contact

Questions or requests about your data: management@laravelbd.com