Privacy policy

The data controller is [administrator danych]. For anything about personal data, write to [e-mail kontaktowy].

• Waitlist: email address, role and city, to tell you when the service launches. Legal basis: your consent (Art. 6(1)(a) GDPR).
• Account: email address, password (we only store its hash, never the password itself), role, language and the date you accepted the terms. Legal basis: the contract for using the service (Art. 6(1)(b) GDPR).
• Artist or venue profile: stage name or venue name, description, genres, links, rates, photos and the venue's address. These are public once the profile is published. An artist's real name is never shown publicly. Legal basis: the contract.
• Location: for an account we store a point rounded to about 1 km and the name of the town. We never store the exact position from your device. A venue's address is stored exactly, because it is public business information. Legal basis: the contract.
• Calendar, listings and bookings: dates, amounts, the messages attached to booking steps and their history. Legal basis: the contract.
• Notifications: the in-app list, your settings and emails. Emails about listings nearby are sent in our legitimate interest (Art. 6(1)(f) GDPR), and each one has an unsubscribe link.
• Security and statistics: server logs (IP address, time, page address) protect the service from abuse, and aggregate visit statistics help us improve the site. Legal basis: legitimate interest.

A published artist or venue profile and active listings can be seen by anyone with the link. Search in the app is available to signed-in users only. A booking is visible only to the artist and the venue's team.

We entrust data to providers who help us run the service and act on our instructions:

• the server and database provider;
• Cloudflare (photo storage and delivery, the R2 service);
• the email delivery provider;
• Umami (visit statistics without cookies and without storing IP addresses);
• the Photon geocoder (komoot), which turns a typed address into coordinates. Our server sends the query, so the geocoder only receives the typed text or a rounded point, never your IP address.

The map in search loads tiles directly from OpenFreeMap, so its servers see your browser's IP address. Some email programs load the fonts of our emails from Google Fonts. We do not sell data or share it with advertisers.

If a provider processes data outside the European Economic Area, this is based on a European Commission adequacy decision (e.g. the EU-US Data Privacy Framework) or standard contractual clauses.

• Unconfirmed waitlist sign-ups: 7 days. Confirmed ones: until you withdraw consent or the waitlist closes.
• Accounts whose email address was never confirmed: 7 days.
• Account, profile, calendar and listings: until the account is deleted.
• Bookings: until the account is deleted, or, where they are needed to establish or defend legal claims, until those claims expire.
• In-app notifications: 90 days.
• Server logs: no longer than 90 days.

You have the right to access, correct and delete your data, to restrict its processing and to data portability, and the right to object to processing based on legitimate interest. You can withdraw consent at any time; this does not affect earlier processing. Write to [e-mail kontaktowy].

You can also lodge a complaint with the supervisory authority; in Poland this is the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw).

Providing data is voluntary, but without an email address you cannot create an account or join the waitlist.

We only use cookies and entries the service needs to work:

• sos_refresh: keeps you signed in to the app (30 days, not readable by page scripts);
• NEXT_LOCALE: the language you chose in the app;
• browser storage (localStorage): light or dark theme and view settings, such as map search.

We use no advertising or analytics cookies. Umami statistics store nothing in your browser, which is why we do not ask for cookie consent.

When we change this policy, we publish the new version on this page with a new date, and we tell app users about significant changes by email.