Privacy Policy

Information we collect

We collect account email addresses, password hashes, saved watchlist artists, and basic session cookies. If you use Google login, we use the email/profile identifier Google returns to sign you in.

Product analytics

We use Amplitude to understand page views and how visitors use discovery features such as venue pages, artist and Spotify links, ticket links, searches, watchlists, concert statuses, and playlist actions. Analytics may include a random device identifier, session information, approximate location derived by Amplitude, and browser/device details. URL-query enrichment and attribution are disabled so sensitive callback or reset parameters are not collected.

We do not send your email address, password, password-reset input, or the text you type into search boxes as analytics event properties. Signed-in activity uses a pseudonymous internal account identifier so activity can be understood across sessions.

We enable Amplitude Session Replay to understand navigation and usability problems through a video-like reconstruction of page interactions. All text input and password fields are masked by default, and visible account email addresses are explicitly masked, so those values appear as asterisks. We do not intentionally capture passwords, email form values, or search text in replays.

How we use it

We use this information to authenticate you, sync your watchlist, protect admin features, understand feature adoption, improve concert discovery, and diagnose frustrating or slow experiences.

What we do not sell

We do not sell personal information. We do not store your raw password.

Third parties

Amplitude processes product analytics for us. Spotify, Google, ticketing providers, and venue websites may receive information when you choose to visit or authorize those services. Those providers have their own privacy policies.

Data requests

To request account deletion or data export, contact mattdpeterson@gmail.com.