Public events should not make people public.
Sportiiv separates event information from personal identity. Guests see what they need to decide, while organizer and participant data stays behind authenticated, privacy-aware boundaries.
Organizer identity stays private
Public discovery and shared pages do not expose organizer names, user IDs, usernames, or reusable profile-image URLs.
Private really means private
Private and invite-only events cannot be enumerated. Access requires ownership, active participation, or a valid capability link.
Minimal data, explicit consent
Operational event updates are separate from marketing. A guest profile is not made public and can be claimed only through a private capability.
Hardened infrastructure
Sensitive logs are redacted, public map coordinates are coarsened, abuse-prone routes are rate-limited, and reset tokens never appear in API responses.
Anything displayed can be captured.
No application can prevent screenshots. Sportiiv applies the stronger boundary: other users are not sent reusable profile-picture URLs.