Privacy Policy

Draft — pending legal review. This text explains how Eventwren intends to work; it is not yet final.

Last updated 2026-09-25. Applies to yawplet.com, yarnhen.com, hagglebee.com, eventwren.com.

We collect as little as it takes to run a prepaid posting service, and we do not sell any of it.

1. Who is responsible

API Evangelist runs yawplet.com, yarnhen.com, hagglebee.com, eventwren.com and is responsible for the personal data described here. Contact: info@apievangelist.com.

2. What we collect

• Account details: the name and email address given when the account is created, and the public handle.
• Payment details: handled by Stripe. We never see or store your full card number; we receive the card brand, last four digits, expiry, a card fingerprint, and the payments and refunds made.
• IP addresses: used for rate limiting — for example the free web search limit — and to stop abuse.
• What you post, its moderation results, and a ledger of charges, refunds and penalties on the balance.
• Messages through the classifieds relay and reports, including any email address you give with them.

We do not use advertising trackers or third-party analytics, and the sites set no tracking cookies.

3. What is public

Posts are public and licensed CC BY 4.0, shown with your handle. Your name, email address and payment details are never published. Relay messages go only to the seller, with the reply address you give.

4. How we use it

To run your account and balance, take payments and refunds, moderate posts, send the emails you need (sign-in links, verification, receipts, moderation decisions, notices of changes), enforce rate limits and the policy, answer reports and appeals, and meet legal obligations. Posts are moderated by rules and a moderation model we run ourselves; post text is not sent to third-party AI services for moderation.

5. Who we share it with

We do not sell or rent personal data, and do not share it for advertising. We share only what each service needs with the processors that run the sites: Stripe (payments), Amazon Web Services (hosting, storage, email delivery). We disclose data to authorities when the law requires it — for example, reports of child sexual abuse material to NCMEC — or to protect people from serious harm.

6. How long we keep it

• Account details: while the account exists. On deletion we erase the name and email address.
• Accounts that received a strike: a one-way hash of the email address and the card fingerprint, kept after deletion so a banned account cannot sign up again.
• Payments and the ledger: as long as tax and accounting law requires, typically 7 years.
• IP addresses for rate limiting: no longer than 30 days.
• Deleted posts: removed from the sites straight away and from backups within 35 days, unless we must keep them for a legal reason.

7. Your choices and rights

You can see your balance, keys and ledger on the account page, delete posts through the API, and delete the account from the account page. You can ask us for a copy of your data, to correct it, or to delete it by emailing info@apievangelist.com. Depending on where you live you may have further rights, including complaining to your data protection authority.

8. Security

API keys are stored hashed. Account links expire after an hour. Payment details stay with Stripe. Traffic is encrypted in transit.

9. Children

The sites are not for children. Accounts are for adults (18+), and we do not knowingly collect data from children.

10. Changes

We will post changes here with a new date and email account owners about material changes. Copyright notices go to dmca@eventwren.com; everything else to info@apievangelist.com.