Privacy

There is no advertising here, no third-party analytics, and no account to create. Nothing on this site is shared with anyone for marketing.

Two cookies

• theme — records whether you chose light or dark. Set only when you use the toggle, kept for a year, and read on your next visit so the page does not flash the wrong colour. It holds one word.
• cl_sid — a random identifier, set the first time you follow a ticket link. It is kept for a year and lets us tell one visitor's clicks apart from another's without knowing who either of you is. It is not set if you never click through.

What we record when you follow a ticket link

Ticket links go through this site before redirecting you to the seller. That step writes one row, containing:

• the time, and which event and source you clicked;
• the random identifier from the cl_sid cookie;
• your browser's user-agent string, and the page you came from;
• a copy of the event's title, venue and date, so the record still makes sense after the listing itself is removed.

Your IP address is not stored in that row. We do not follow you to the seller's site and have no way of knowing whether you bought anything.

If you send us a message

The contact form stores what you type: the message, and the name and address if you give them. It also records which listing you were looking at, if you reached the form from one, and your browser's user-agent string — that last one only to tell a person from a script when a burst of submissions arrives. Your IP address is not stored.

Messages are kept until they are dealt with and for a while afterwards, because what we told a venue in September is worth being able to look up. Ask and yours will be deleted.

How long it is kept

Indefinitely, at present. Click records are not deleted on a schedule, and they deliberately outlive the events they point at, so a record from July is still here. If you want yours removed, ask and we will remove it.

Your IP address, and the request log

The web server in front of this site keeps an access log, and your IP address is in it. So is the time, the page you asked for, the status we answered with, your browser's user-agent string, and the page you arrived from if your browser sent one. That is an ordinary web server log and it is kept for 90 days, after which it is deleted automatically rather than on request.

It is there for two reasons, and we would rather say both. The first is knowing whether anyone is reading the site and what they came looking for. The second is security: this site is on the public internet, and without a log we cannot tell a person from someone working through a list of passwords or probing for an admin panel.

What is not in it: cookies and authorisation headers are stripped before the line is written, so the log cannot be used to impersonate you or anyone else. We do not use a third-party analytics service, so nothing about your visit is sent anywhere else.

The two places above that say your address is not stored are still exactly true. The contact form does not record it in your message, and a ticket click does not record it against the click. Those rows still have no address in them. The request that carried them appears in the server log like every other request, and that log is the one thing on this page that does hold it.

Rate limiting works as it did: your address is checked against a short-lived counter held in memory, which is discarded when the server restarts.

Where the data lives

On a single server we rent, in the United States. The listings themselves come from public sources; nothing you do here is sent to them beyond the ordinary act of following a link.