Privacy Policy

We don't require an account, and we don't sell your personal information. We use privacy-friendly, cookieless analytics to understand how the Service is used, and — only if you opt in — we store a push-notification subscription so we can send you event alerts. Your saved favorites stay on your own device.

We collect the following limited categories of information:

• Information you provide. If you email us or send feedback or event corrections, we receive whatever you choose to include.
• Push-notification data (only if you opt in). To deliver event alerts, we store the push subscription your browser generates — a subscription endpoint URL, the associated public keys, and your browser's user-agent string. We use these only to send notifications and to keep the subscriber list current, and we deactivate them when you unsubscribe.
• Usage and analytics data. We use PostHog (configured first-party and cookieless) and Vercel Analytics to measure things like pages viewed and features used (for example, filters applied, ticket links clicked, favorites, and calendar exports), and whether the app is installed to your home screen. This is tied to an anonymous identifier stored in your browser, not to your name, and we do not build profiles of anonymous visitors.
• Device and log data. Like most websites, our hosting provider automatically processes technical data such as your IP address, browser type, and timestamps in order to serve and secure the Service.
• Favorites. When you favorite an event, that preference is stored locally in your browser and is not sent to us.

We do not use tracking cookies, and there is no consent banner because our analytics run cookieless. We do use your browser's local storage for essential and functional purposes — remembering your favorites, an anonymous analytics identifier, and small app-state flags. You can clear local storage in your browser settings, though doing so will reset those preferences.

We use the information above to operate, maintain, and improve the Service; to deliver push notifications you have requested; to understand which features are useful; to prevent abuse and keep the Service secure; and to respond to your messages.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with service providers that help us run the Service — currently our hosting and analytics providers (Vercel), product analytics (PostHog), and our content and subscription backend (Airtable) — who process it on our behalf. We may also disclose information if required by law, to protect our rights, or in connection with a business transfer.

When you click an outbound link (for example, to a ticketing, venue, or streaming site), you leave the Service and that third party's own privacy practices apply. Outbound ticket and RSVP links pass through a redirect on our servers so we can record the click and add any applicable referral parameters; we note this here for transparency.

Notifications: you can opt out at any time through your browser or device settings, or through our in-app control. Analytics: because our analytics are anonymous and cookieless, we do not build a profile of you; you can also clear local storage or use your browser's tracking protections.

Depending on where you live (for example, California under the CCPA/CPRA), you may have rights to access, delete, correct, or limit certain personal information, and to not be discriminated against for exercising them. Because we operate largely without accounts and do not sell personal information, some rights may have limited application — but you can contact us at info@onset.show to make a request, and we will respond as required by law.

We keep push-subscription data until you unsubscribe or it becomes invalid, after which it is deactivated and removed. Analytics data is retained in anonymous or aggregate form. We keep emails you send us for as long as needed to address them.

Onset is a general-audience music-events service and is not directed to children under 13, and we do not knowingly collect personal information from them. Some events listed are age-restricted (for example, 18+ or 21+); those restrictions are set and enforced by the venues, not by Onset. If you believe a child has provided us personal information, contact us and we will delete it.

We use reasonable measures to protect information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service links to third-party sites we do not control. Their privacy practices are their own; please review their policies before providing information to them.

We may update this Privacy Policy from time to time. We will revise the "Effective date" above, and material changes take effect when posted.

Questions or requests about your privacy? Email us at info@onset.show.