Legal
Privacy Policy
This policy describes what Concertly stores about you, how it is used, and the choices you have. For a broader overview of security controls, see the Trust & Privacy page.
Data we collect
- Account: email address and (optional) Google account identifier used to sign in.
- Profile: display name, optional username, optional avatar image.
- Concerts you log: artist, date, venue, city, country, setlist, rating, ticket price, notes, and any photos/videos you upload.
- Friendships you create with other Concertly users.
- Optional Spotify connection tokens, stored only if you connect Spotify to create playlists.
We do not collect location, contacts, payment information, or device-level data.
How we use your data
- Provide the core product: your dashboard, insights, Wrapped, and friend comparisons.
- Enable social features you opt into (friend requests, Wrapped share links).
- Fetch artist metadata and setlists from third-party sources (Spotify, setlist.fm) on your behalf.
Concertly does not sell your data and does not use it for advertising.
Sharing & visibility
- Your concert history is private by default — only you can read or modify it.
- Accepted friends can view each other's concert history and profile picture.
- Profile basics (display name, username, avatar) are visible to other signed-in users so friends can find you. Your email is never shown to other users.
- Wrapped share links (
/w?id=…) are public by design: anyone with the link can view that Wrapped snapshot without signing in. Only generate a link if you're comfortable with the recap being publicly viewable.
Third-party services
- Lovable Cloud — application hosting, database, authentication, file storage.
- Google — optional single sign-on.
- Spotify — optional playlist creation from setlists (only if you connect).
- setlist.fm — read-only lookups of publicly-available setlists.
Retention & deletion
You can delete individual concerts from My Shows, remove friendships from Friends, and disconnect Spotify from your profile at any time. To request full account deletion, contact us via the channel on the homepage.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal data we hold about you. Contact us to exercise any of these rights.
Changes
We may update this policy as the product evolves. Material changes will be surfaced in the app.
Last updated: September 2026.