Trust & Privacy

• Sign in with email + password or Google.
• Sessions are managed by our backend provider; tokens are stored in your browser.
• You can sign out at any time from the account menu, which clears the local session.

• Your profile: display name, optional username, and (if you upload one) a profile picture.
• Concerts you log: artist, date, venue, city, country, rating, and any optional notes you enter.
• Friendships you create with other Concertly users.

Concertly does not request location, contacts, payment information, or other device-level data.

• Your concert history is private by default. Only you can read or modify it.
• Accepted friends can view each other's concert history (for the side-by-side stats comparison) and each other's profile picture. Either party can remove the friendship at any time, which revokes access.
• Profile basics (display name, username, avatar) are visible to other signed-in Concertly users so friends can find you. Your email address is never shown to other users.
• Pending friend requests are visible only to the two people involved.

Concertly uses row-level access rules on the database: every read and write is checked against your signed-in identity before data is returned. Friend visibility is gated on a verified “accepted” friendship record between two users.

Concertly is built and hosted on the Lovable platform, which provides the application runtime, managed database, authentication, and file storage used by this app. Traffic between your browser and Concertly is served over HTTPS.

You can delete individual concerts from My Shows and remove friendships from Friends at any time. Removing a friendship immediately revokes the other person's read access to your concert history.

To request full account deletion, contact us at the address below.

Questions, privacy requests, or security reports: reach the Concertly team via the contact channel shown on the homepage. Please describe the issue in enough detail for us to investigate.