Privacy Policy

Last updated: 17 July 2026

This Privacy Notice (Aviso de Privacidad) explains how the 7 Realms festival ("7 Realms", "we", "us") collects, uses, shares, and protects your personal data when you use this website. It is provided under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and, for visitors in the European Union, the General Data Protection Regulation (GDPR). The organizer of 7 Realms is the data controller responsible for your personal data.

Personal data we collect

Depending on how you use the site, we may collect:

  • Contact and profile details: your email address (stored in normalized form), first and last name, Instagram handle, WhatsApp phone number, and preferred language.
  • Waitlist and referral data: your position in the waitlist queue, your referral code, who referred you and whom you invited, and your invite counts.
  • Game data: your points balance and a ledger of the point-earning actions you take, plus your "I'll be there" interest in each realm.
  • Ticket orders: order information synced from TicketFairy, including the buyer email, per-attendee emails, and order totals and currency.
  • Merch orders: purchases processed through Stripe.
  • Realm Keys and check-ins: the venue check-ins ("Realm Keys") you collect and the perks you earn.
  • Form submissions: sponsor and gatekeeper (promoter) enquiries, including brand, email, contact name, and message.

Analytics and tracking

We use PostHog for product analytics to understand how people use the site. This includes:

  • Autocapture of pageviews and clicks, and capture of errors and exceptions.
  • Session replay, which records your on-page interactions. Text you type into inputs is masked and is not recorded.
  • Storage of a first-party analytics identifier in your browser's localStorage and cookies. Analytics data is sent through a first-party proxy (palms.tulumbible.com).
  • A cross-app visitor id (tb_visitor_tbu_id) that helps recognize you across our sibling Tulum sites.

If enabled, we may also use the Meta Pixel and Plausible (a cookieless analytics tool). Analytics and the Meta Pixel load only after you accept the cookie banner. If you decline, only essential storage is used and no analytics or advertising trackers are loaded.

Cookies and local storage

We use two categories of storage:

  • Essential (always on): the realtime session used by our database (Convex), your saved consent choice, and your passport key and member code stored in your browser's localStorage. These are needed for the site to work and are not used for tracking.
  • Analytics (consent-gated): PostHog and, where enabled, the Meta Pixel. These load only after you accept the cookie banner and can be declined.

How we use your data

We use your personal data to:

  • Run the waitlist, referral game, and leaderboard.
  • Sell tickets and merch, and process your orders.
  • Deliver your passport, Realm Keys, and earned perks.
  • Send you transactional email such as magic sign-in links, receipts, and reveal announcements.
  • Understand how the site is used and improve it.

Who we share your data with

We do not sell your personal data. We share it only with service providers ("processors") who help us run the festival and site. Each has its own privacy policy:

  • Convex — database and backend hosting.
  • Vercel — website hosting.
  • Resend — transactional email delivery.
  • TicketFairy — ticket sales and payment; TicketFairy's own policy governs the ticket purchase data collected on their platform.
  • Stripe — merch payment processing.
  • PostHog — product analytics.
  • Meta — the Meta Pixel, where enabled.

Data retention

We keep order and transaction records for as long as required for tax and legal purposes. Other personal data is kept only as long as needed and is deleted when you ask us to delete it.

Your rights

Under the LFPDPPP you have ARCO rights — to Access, Rectify, Cancel (delete), and Object to the processing of your personal data. If you are in the EU, the GDPR also gives you rights of access, erasure, and data portability.

You can:

  • View and download your data, and request deletion, yourself from your Passport at /passport.
  • Or contact the organizer using the details below.

Deleting your account removes your profile and game data. For legal reasons we retain order records, but we unlink them from your identity where possible.

Contact

For any privacy question, or to exercise your rights, contact our data-protection contact at privacy@7realms.mx.

Changes to this notice

We may update this Privacy Notice from time to time. The current version, with its "last updated" date, is always the one published on this page.

Back to The Gate