FESTIVAL PLANNER · PRIVACY Back

Privacy Policy

Last updated: 12 September 2026

This policy explains what Festival Planner (“the app”, “we”) does with your information. It describes the app as it actually works. If a future change alters any of this, the change and the date will appear here.

The short version

  • We never sell your data. Not to anyone, at any price.
  • We never monetise it — no advertising, no profiling, no data brokers, no analytics or tracking pixels.
  • We never share it with third parties for their own purposes. The only outside companies that touch it are the service providers we need to run the app, listed below, and they may only process it on our instructions.
  • Without an account, your data stays on your device. Pins, itinerary, travel notes and settings live in your browser's own storage and are never sent to us.
  • With an account, only what you use gets synced, so it is on all your devices.

If you do not create an account

The app is fully usable signed out, and in that state your personal data does not leave your device. Meetup pins, your saved schedule and priorities, travel plans, theme and layout preferences are stored in your browser's local storage. Clearing your browser data deletes them, and we have no copy.

Two things still involve the network even when signed out, because they cannot work otherwise. Loading map imagery sends your IP address and the map tiles you request to the map providers below, exactly as visiting any website shares your IP with the server. Looking up a flight sends the flight number and date you typed to the flight data provider. Neither is tied to an identity we hold, because signed out we do not have one.

Location is never transmitted while signed out. GPS and compass are read on your device to draw your position and bearing, and stay there.

If you create an account

An account exists so your plans follow you between devices. It holds:

  • Account details: your email address, a username, and a display name.
  • Festival data: your meetup pins, saved set times and their priorities, travel plans (flights, hotels, rental cars), and display preferences such as theme.
  • Friends: friend requests and accepted friendships between accounts.
  • Live location — only while you switch it on: if you enable location sharing with a friend, your latest position and heading are stored so that friend's app can show you on the map. It is a single current position per person, replaced each time it updates, not a history or a trail. Turning sharing off stops the updates.
  • Chat: if you use chat, your conversations, who is in them, and the messages themselves.
  • Notifications: if you turn them on, a push subscription identifying your browser so a notification can reach it.
  • Contributions: anything you submit to the moderation queue, such as a lineup correction or a request for a new festival, together with the account that submitted it.

Chat is not end-to-end encrypted

Chat messages are stored in a form we can read. They are protected in transit and at rest by the providers below, and we do not read them as a matter of course — but moderators can read conversations that are reported to them, and a lawful order could compel disclosure. Please do not send anything through chat that you would not want read. We are telling you this plainly rather than implying a privacy guarantee the app does not provide.

Service providers

Running the app requires a small number of companies. They act as processors: they handle data to provide their service to us and may not use it for their own purposes.

  • Vercel — hosting and the app's API, including standard server logs.
  • Neon — the database holding account, festival, friends and chat-membership data.
  • Google Firebase — sign-in (Firebase Authentication) and chat message delivery and storage (Cloud Firestore).
  • Map tile providers — CARTO, OpenStreetMap and Google serve the map imagery, and receive your IP address and the tiles you request.
  • Flight data providers — AeroDataBox or aviationstack, only when you look up a flight, and only the flight number and date.
  • Push services — Apple, Google or Mozilla, depending on your browser, deliver notifications if you enable them.

Keeping it safe

Traffic is encrypted in transit with HTTPS. Passwords are handled by Firebase Authentication and are never seen or stored by us. Access to your synced data requires your signed-in session. No service can promise perfect security, and we do not: we take reasonable measures appropriate to a small community project, and you should judge what you put into it accordingly.

How long we keep it

Account and festival data is kept while your account exists. Shared locations are overwritten by each update and are only shown to friends for a short window. Deleting your account from Account Management removes your profile and the data attached to it, including pins, schedule, travel plans, friendships and shared location. Backups and server logs may retain copies for a short period before they age out.

Your choices

  • Use the app signed out and keep everything on your device.
  • Turn location sharing on or off per friend, at any time.
  • Turn notifications on or off per conversation.
  • Change your username, email or password in Account Management.
  • Delete your account, and with it your synced data.
  • Clear your browser's site data to remove everything held locally.

Depending on where you live you may have additional rights over your data, such as access, correction, deletion or portability. Contact us and we will do what the law requires.

Children

The app is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Changes

If this policy changes, the date at the top changes with it. Continuing to use the app after a change means you accept the updated policy.

Contact

Questions about this policy, or a request about your data, can be sent to the contact address on the site. See also the Terms of Service.