Privacy Policy

1. Who we are

Crowdlore is a concert-logging platform operated from Oregon, USA. We help music fans record and share their live music experiences.

Contact: legal@crowdlore.app

2. Information we collect

Account information

When you create an account we collect your email address, a username you choose, and an optional display name, bio, and avatar photo.

Concert logs

We store show data you log: artist name, venue, date, your star rating, written review, song reactions, and any photos you upload.

Spotify data

If you connect Spotify during onboarding we read your top artists to personalise recommendations. We do not store Spotify access tokens beyond the onboarding session. We never read your listening history or playlists.

Usage data

We collect standard web-server logs (IP address, browser type, pages visited) for security and performance. We do not sell this data or use it for advertising.

3. How we use your information

• To operate and improve the Crowdlore service
• To personalise your concert feed and recommendations
• To display your public profile and show history to other users
• To send transactional emails (password reset, email confirmation)
• To detect and prevent fraud or abuse

4. Public vs. private data

Your username, display name, avatar, bio, and show history are public by default and visible to anyone on Crowdlore. Your email address is never public. Lists marked private are only visible to you.

5. Data sharing

We do not sell your personal data. We share data only with:

• Supabase — our database and authentication provider (stores all user data)
• Vercel — our hosting provider (processes server-side requests)
• Setlist.fm / Ticketmaster / Deezer — third-party APIs queried to enrich concert data; we pass only artist/venue names, not your personal information

6. Cookies and local storage

We use cookies solely for authentication (session token). We do not use advertising or tracking cookies. We store user-interface preferences in localStorage.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, your concert logs, reviews, and profile are permanently deleted within 30 days.

8. Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing legal@crowdlore.app. Oregon residents have additional rights under ORS Chapter 646A.

9. Children

Crowdlore is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, please email us.

10. Changes to this policy

We may update this policy. We will notify you by updating the effective date above and, for material changes, by emailing your registered address.