Skip to content
thefestivalist

Privacy

Last updated 7 September 2026

The short version: we collect an email address if you subscribe or create an account, and we store the festivals you choose to save. There is optional usage analytics to help improve the site. Analytics runs only when enabled and you allow it. We do not use advertising trackers or sell your personal information for marketing.

What we collect

If you subscribe to the newsletter: your email address, and any genre or region preferences you give us.

If you create an account: your email address. If you sign in with Google, Google tells us your email address and basic profile information — we do not receive your Google password, and we never ask for access to anything else in your Google account.

If you save festivals: which festivals you saved, whether you marked each as interested, going or been, and any notes you add. This is visible only to you.

Automatically: our host keeps standard server logs, which include IP addresses, for security and to keep the site running. We do not analyse these or connect them to accounts.

Optional usage analytics

When enabled and you allow it, Vercel Web Analytics measures page visits, referring sites, broad geographic information, device and browser types, and actions such as filtering, viewing search results, signing in, saving festivals and opening ticket links. We also count categories of errors without sending error messages or recordings of your session.

We do not send your email, account identifier, password, private calendar notes, precise location or search text as analytics properties. We remove query strings and fragments from measured page URLs, exclude authentication and admin pages, and replace profile names and private calendar identifiers in measured paths. The analytics provider processes connection information to produce its traffic statistics; analytics is not a promise that no data leaves your browser.

We remember your analytics choice in this browser. If you allow analytics, we also store a last-visit day and a short-lived signup marker locally to count return visits and confirmations without sending an account ID. Browser Do Not Track and Global Privacy Control signals override permission. You can change your choice below. Turning it off stops future collection; it does not erase aggregate statistics already collected.

Vercel Pro currently provides a twelve-month reporting window. We use these statistics for product improvement, not advertising profiles. Ad blockers, declined analytics and switching browsers mean counts are estimates rather than a complete account history.

Optional analytics: not allowed.

What we do not collect

We do not use Google Analytics, advertising pixels, advertising networks, session recordings, or cross-site advertising tracking.

Our fonts are served from our own domain rather than a font service, so loading a font does not contact an external font service.

We do not sell or rent personal information. Service providers process information to operate the site as described below.

Who processes data on our behalf

Supabase hosts the database and handles sign-in. Your email address, account and saved festivals live there.

Vercel hosts the website and keeps the server logs described above, and processes optional usage analytics.

Google is involved only if you choose to sign in with Google, and only to confirm who you are.

Resend delivers our email when newsletter sending is switched on. It receives the address the email is being sent to.

Each of these acts on our instructions and is not permitted to use your information for its own purposes.

Cookies and local storage

If you sign in, we store a session so you stay signed in. That is necessary for accounts to work at all.

We also remember small preferences in your browser — such as whether you prefer the Browse or Plan view. That never leaves your device and is not readable by us.

We do not set advertising cookies. Optional analytics uses the browser storage and permission controls described above; account sessions and essential preferences work independently of that choice.

Links to other sites

Festival pages link to each festival’s own website and ticket seller. Those sites have their own privacy practices, and we have no control over them.

Some ticket links may earn us a commission, in which case the link passes through the ticket seller’s affiliate system, which will know a visitor arrived from here. We label those links, and they never affect which festivals we list or how we order them.

Keeping and deleting your information

We keep your account and saved festivals until you ask us to delete them. Newsletter subscribers are kept until you unsubscribe.

You can ask us to delete your account and everything attached to it at any time, and we will. Email hello@thefestivalist.com.

Depending on where you live you may have further rights — to see what we hold, to correct it, or to receive a copy. Ask, and we will help.

Children

This site is not directed at children under 13, and we do not knowingly collect their information. Many festivals have their own age restrictions, which we note on festival pages where we know them.

Changes

If this policy changes we will update the date at the top. If a change materially affects what we collect or who receives it, we will say so on the site rather than quietly amend this page.

Contact

Questions about any of this: hello@thefestivalist.com.

See also our terms of use.