Privacy

Browsing without an account

You can search and read every public page without signing in. Doing so, the site keeps two things in your browser: your settings (language, theme, time format) and your chosen location if you set one. Both live in your own browser rather than on the server, and clearing your site data removes them.

Your approximate location is estimated from your network address so that “near you” and the times on the page mean something on a first visit. That estimate is made per request and is not stored against you. Picking a city yourself replaces it, and that choice is what the site uses from then on.

With an account

An account stores your email address, a display name and a generated handle. If you signed in with GitHub, Google or Facebook, the site stores the fact that your account is linked to that provider; it never receives or stores your password there. If you use a password here instead, only a cryptographic hash of it is stored. The password itself is never written down, and cannot be recovered from what is.

Signing in creates a session. Only a hash of the session secret is stored, so a copy of the database is not a copy of everybody’s logins. Sessions expire after inactivity, and resetting your password ends every session on every device, including the one that asked.

What you do with an account is stored because it is the feature: the events you save, the things you vote on, the venues, performers, people and organizations you follow, and the events you publish. Saved events can be exposed as a calendar feed, and the feed’s address is the credential: anyone holding that URL can read that list, which is why it can be regenerated at any time.

Email

Mail is sent for a small number of reasons and only ones you triggered: verifying an address, resetting a password, signing in by link. A link mailed to you expires, and asking for a new one retires the outstanding links of that kind.

What is not collected

There are no third-party analytics, no advertising trackers and no cross-site profiling. Page views are counted per event so that popular listings can be ranked; those counts are aggregate and are discarded after a retention window rather than kept indefinitely.

Map tiles are fetched by your browser directly from the map provider, so that provider sees the request the way any site embedding a map would. Fonts are loaded from Google Fonts on the same basis.

Your data

You can change or remove what you have published, unfollow anything you follow, and clear your saved events at any time from the site itself.