Last updated 14 October 2026
Privacy Policy
What Rorame collects, who sees it, how long it's kept, and how to delete it.
Who we are
Rorame is a guide to Tbilisi's bars, clubs and events, and a guest-list service venues use to decide who comes in. Rorame, based in Tbilisi, Georgia, is responsible for the personal data described here.
What we collect
Your account: your email address, and your name if you sign in with Google or Apple. We record when you last signed in.
Guest-list requests: your name and email, and whatever the venue's list asks for — date of birth, a face photo, your Georgian personal number or passport number, and your phone number. We never ask for a scan or photo of an ID document.
The door log: when a venue scans your pass, we record the time, the venue, your name and whether you were let in.
Venue visits: when you open a venue's page or menu on Rorame while signed in, we record that you visited, on which nights, and whether you follow the venue. If you're not signed in, we only add one to that night's anonymous count.
Notifications on iPhone: if you allow them, we keep a notification token for your phone, and your language, so we can tell you when a venue has answered your guest-list request. The notification names the venue and nothing else. We remove the token when you sign out or delete your account, and you can switch notifications off in iOS Settings at any time.
How the iPhone app is used: the Rorame app uses Microsoft Clarity, an analytics service, to see which screens people open, where they tap and scroll, and how screens look, so we can fix what's confusing. It also records device details such as the phone model, system version and country. We hide the guest-list form and your passes from these recordings, and we don't link them to your account. Clarity is run by Microsoft (privacy.microsoft.com), which processes this data for us.
Our website uses no third-party analytics, and nothing we use is for advertising. We don't sell or rent anyone's data.
Why we use it
To run your account (performing our agreement with you), and to let the venue you applied to decide whether to admit you and check you at the door. You give consent for this when you send a request, and you can withdraw it any time by deleting the request.
We keep the door log so a venue can spot a pass being used by two people, which protects you as well as them.
We send the notification you allowed to tell you a venue has answered your request (your consent, which you withdraw in iOS Settings). We use app analytics to understand how the app is used and to fix problems (our legitimate interest in improving the service).
We record venue visits so each venue can see who its regulars are (our legitimate interest in running the service venues pay for), and so a venue you follow can tell you about its events and offers (your consent, which you give by following and withdraw by unfollowing).
Who sees it
The venue's managers see everything in your request for that venue, and nothing from your requests to other venues.
The venue's door staff see your name, age and face photo, and how many times you've visited. They never see your personal number, phone or date of birth.
Rorame staff can access data only to run the service, fix problems or investigate abuse.
A venue sees the name and email of signed-in guests who opened its page or menu, how many nights they did, and whether they follow it. Each page says so to signed-in visitors.
Venues may use guest-list data only to decide on and check your admission. They may contact you about events and offers only if you follow them. Passing your data on to anyone else breaks our Terms of Use.
How long we keep it
Declined requests: your photo, personal number and phone are deleted the moment the venue declines. Your name and email stay so you can see the decision and apply again.
Approved requests: your personal number is deleted 30 days after approval. If the venue withdraws your pass, it's deleted at once.
Venue visits stay until you delete your account. Unfollowing a venue stops it contacting you straight away.
Everything else stays until you delete the request or your account.
Deleting your data
Under Passes you can delete any single request, which erases its details, photo and door-log entries. A pass stops working immediately.
You can also delete your account there. That erases every request, every photo, every personal number and phone number, the door log's record of your visits, every venue's record of your visits and follows, your phone's notification token, and your sign-in. It can't be undone.
Where it's stored
Data is held by the providers who run the service for us: Google Firebase (accounts, notifications and the database, in Frankfurt), Vercel (hosting and photo storage), Resend (sending pass emails), Apple (delivering notifications to iPhones) and Microsoft (app analytics, see above). Some of them may process data outside Georgia, under contracts that require them to protect it.
Photos are stored privately. They have no public link and are shown only to signed-in venue staff, one at a time.
Cookies
We set one cookie, which keeps you signed in. The sign-in service also saves your session in your browser, and a venue's page remembers in your browser that you said "Not now" to following it. There are no advertising or tracking cookies. (The iPhone app doesn't use cookies.)
Your rights
You can ask to see the data we hold about you, correct it, delete it, or get a copy. Most of this you can do yourself under Passes; for the rest, email us.
If you think we've mishandled your data, you can complain to Georgia's Personal Data Protection Service (pdps.ge). If you live in the EU or UK, you can also complain to your local data protection authority.
Age
Rorame isn't for anyone under 16. Venues set their own minimum age, which is often 18 or higher.
Changes
If we change how we use your data, we'll update this page and the date at the top. For significant changes we'll email account holders before they take effect.
Questions: hello@rorame.ge