Privacy Policy

Festival Set Times is a tool that helps you plan which sets to see at music festivals and share that plan with friends. We collect the bare minimum we need to make that work: your name and email when you sign in with Google, plus the sets you favorite and groups you join.

We don't sell your data.

• Account info from Google sign-in. When you sign in we receive your Google account name, email address, and profile picture. We do not see your password.
• Favorites. The sets you've hearted (festival ID + set ID + timestamp).
• Groups. Groups you've created or joined and your role in them (owner / member). When you create a group, we generate an invite code.
• Server logs. Standard request logs (IP address, user agent, timestamp) kept for a short time by our hosting providers for security and debugging.

• To show you the sets you've favorited.
• To show your group's members which sets each other has favorited.
• To show your name and avatar to other members of your groups.
• To keep the service running and prevent abuse.

We use a small number of third-party services to run the site. Each one only receives what's needed for its job:

• Google — handles sign-in. They share your name, email, and avatar with us; we don’t share anything new with them.
• Google Analytics — we use Google Analytics 4 to understand how the site is used (page views, navigation patterns, rough geography from IP). Google receives a truncated IP address, your user agent, and your interactions with the site. We don’t pass them your account email, name, or favorites.
• Infrastructure providers — we use third-party providers for web hosting, database, authentication, and content delivery. They process the data described in “What we collect” on our behalf under industry-standard data processing terms.
• Embedded music players — some pages (e.g. artist pages) embed a third-party player so you can preview music without leaving the site. When that player loads, the third party receives standard browser request data (your IP address, user agent, and the page you came from). It doesn’t see your account.

Other members of any group you join can see your name, avatar, and which sets you've favorited for that festival. If you don't want someone to see what you're planning, don't join a group with them.

We do not sell, rent, or trade your personal information. Period.

We use two kinds of cookies: essential cookies that keep you signed in (set by Supabase Auth), and analytics cookies set by Google Analytics (e.g. _ga) so we can see aggregate site usage. We do not use advertising cookies and we don’t share data with ad networks.

If you don’t want analytics tracking, your browser’s “Do Not Track” or any standard tracker-blocking extension (uBlock Origin, etc.) will block Google Analytics on this site.

You can delete your account at any time by emailing us at the address below. When you delete your account, your favorites, group memberships, and groups you own will be removed.

If you're in the EU, UK, or California, you also have rights under GDPR / UK GDPR / CCPA to access, correct, or export your data. Email us and we'll help.

We keep your account data as long as you use the service. Server logs are kept for up to 30 days. After deletion, your data is removed within 30 days from active systems and within 90 days from backups.

Festival Set Times isn't intended for anyone under 13 (or 16 in the EU). We don't knowingly collect data from children. If you believe a child has signed up, email us and we'll remove the account.

If we make material changes to this policy, we'll update the date at the top and, for big changes, post a notice on the site. Continued use after changes means you accept the new policy.

Questions, deletion requests, or concerns: support@festivalsettimes.com.