Privacy Policy

• Account data — your email, from magic-link or Google sign-in, to create and authenticate your account.
• Usage & analytics — cities and genres you browse, artists and venues you follow, and pages you view, to operate, personalize, and improve Lineup.
• Approximate location (city only) — to show local events. We do not collect precise GPS location.
• Device & log data — browser, device type, and IP address, for security, fraud prevention, and analytics.
• Bug reports — anything you submit, which may include device and usage context.

We do not collect sensitive categories of data (e.g., health, precise geolocation, government IDs).

We use cookies and local storage for two purposes: essential cookies that keep you signed in and the service working, and analytics cookies that help us understand usage. Essential cookies are required to use Lineup. You can accept or decline non-essential cookies via our cookie banner, and you can clear cookies anytime in your browser. We honor browser Do-Not-Track signals where supported.

We do not sell your personal information. We share data only with service providers that process it on our behalf under contract:

• Supabase — database and authentication
• Vercel — application hosting and edge logs
• Google — OAuth sign-in (if you use it)

We receive event data fromTicketmaster’s public API; we do not send your personal data to them. We may disclose data if required by law.

California (CCPA/CPRA):you have the right to know what we collect, to access and delete it, to correct it, and to opt out of any “sale” or “sharing” — though we do not sell or share your personal information.
EU/UK (GDPR), where applicable: you have rights of access, rectification, erasure, restriction, portability, and objection, and you may withdraw consent or complain to a supervisory authority. Our legal bases are consent (analytics, marketing email), contract (running your account), and legitimate interests (security and improvement).
To exercise any right, email privacy@onthelineup.com.

We keep personal data only as long as needed for the purposes above or while your account is active, then delete it. We use reasonable safeguards including encryption in transit and access controls. No system is perfectly secure, and we cannot guarantee absolute security.

Lineup is not directed to children under 18, and we do not knowingly collect data from them. If we learn we have, we will delete it.

Authentication emails (your sign-in link) are required to use Lineup. Any optional marketing email will include a one-click unsubscribe, which we honor promptly.

We may update this policy; we will post the new version with an updated date and notify you of material changes in-app.