Privacy

What we store

When you accept an invite we keep your email, display name, username, and password (the password is stored by Supabase Auth, not in our own tables). We also keep the artists you follow, whether concert emails are on, a log of which gigs we have already emailed you about, and — if you connect them — Spotify or YouTube Music tokens so we can import artists. We do not sell tickets or sell your data.

Artist names, photos, and UK concert listings are stored so we can show gigs. You only see artists you follow. If you leave, your follow list, email log, and connected accounts are removed. Dates stay only where another member still follows that artist.

Why we use it

We use this to let you log in, show your concerts, send at most one concert email a day from alerts@shenanmusic.com when you have emails on, and import artists you ask for from Spotify or YouTube Music.

Who else sees it

Hosting is Vercel. Login and the database are Supabase. Concert emails are sent with Resend. Spotify and Google only see what you approve when you connect those accounts. Ticket sites are checked for public listings; we do not send them your email or password.

Cookies

We only use cookies that are needed to run the site: a sign-in session so you stay logged in, and short-lived cookies while you connect Spotify or YouTube Music. There are no analytics, advertising, or tracking cookies, so there is no cookie banner to accept or reject.

How long we keep it

We keep your account until you delete it, or until an admin disables it. Disable stops you logging in but leaves your artists and history. Delete removes your login and your personal rows.

Your choices

You can change email settings, connect or disconnect Spotify and YouTube Music, and remove artists on the site. To delete your account, open Settings while signed in and follow the delete steps. The last remaining admin cannot delete their account until another admin exists.