Privacy Policy
Last updated: August 27, 2026 · version 1.8
This policy explains, in plain language, what data urShowList collects, what for, whom it shares it with and what your rights are. It follows Brazil’s General Data Protection Law (LGPD — Law No. 13,709/2018).
Who is responsible
The controller of your data is the urShowList team. For any privacy matter, contact our data protection officer at legal@urshowlist.com.
What we collect
We collect only what urShowList needs to work. A summary of what is collected, what for and on which legal basis:
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Account and profile | email, username, display name, photo, bio and links. | Create and maintain your account and public profile. | Performance of a contract |
| Content you create | reviews, ratings, concert diary, photos and videos, lists. | Display your content in the app according to the visibility you choose. Concert photos marked as public may also appear in the gallery of the show's artist profile (you can choose to hide them from that profile). | Performance of a contract |
| Artist profile (verified) | bio, cover and artist photos, email and booking contact, pinned note, links and posts (photos/videos + caption) published by the artist. | When you claim and manage an artist profile, display this information and your posts on the public artist page and in the feed of those who follow you. | Performance of a contract |
| Social interactions | likes, comments, reposts, followers, blocks and mutes. | Operate the social network features and the activity feed. | Performance of a contract |
| Google login (optional) | name, email and photo from your Google profile. | Authenticate and create your account when you choose "Sign in with Google". | Consent |
| Spotify connection (optional) | your Spotify ID and your most-listened artists (cached). | Personalize recommendations; only if you connect and while connected. | Consent |
| Approximate location | country estimated from your IP (we do not store your IP per user) and, if you follow an artist or set your country in settings, the country code you save. | Prioritize shows near you on the home page and notify you when an artist you follow announces a new show in your country. You can change or clear your country in settings. | Legitimate interest |
| Product feedback | the message you write in the feedback form, the type you pick, the page you opened it from and your answer to the product question. | Understand problems and priorities in order to improve urShowList. Sent only when you fill in and submit the form; it is not published in the app. | Legitimate interest |
| Essential technical data | session/authentication cookie. | Keep you securely logged in. | Legitimate interest |
| Usage analytics (optional) | pages visited, traffic source and aggregated interactions (Google Analytics). | Understand how urShowList is used in order to improve it. Collected only with your consent. | Consent |
How we use your data
- operate your account, your profile and your concert diary;
- display your content according to the visibility you choose;
- run the social features (feed, likes, comments, followers);
- personalize recommendations and prioritize shows near you;
- maintain security, prevent abuse and comply with legal obligations.
We do not sell your data and we do not use your data for third-party advertising.
Who we share with
To operate the service, we rely on providers that process data on our behalf (processors). Each handles only what is necessary for its purpose:
| Service | Purpose | Location | Privacy |
|---|---|---|---|
| Supabase | Database, authentication and media storage (photos, videos and generated cards). | United States / European Union | View policy |
| Optional social login ("Sign in with Google") — authenticates you and provides your Google profile name, email and photo. | United States / European Union | View policy | |
| Spotify | Optional connection to import your favorite artists. | United States / European Union | View policy |
| Ticketmaster | Import of public concert and event data. | United States | View policy |
| setlist.fm | Import of public setlist and concert history. | European Union | View policy |
| Deezer | Fetching artist photos and similar-artist suggestions (public data). | France (European Union) | View policy |
| Upstash (Redis) | Media processing queue; carries only internal identifiers, no personal data. | United States | View policy |
| Sentry (Functional Software, Inc.) | Error and stability monitoring. Receives only technical failure data (message, stack trace, page and browser) — no cookies and none of the content you write. | United States | View policy |
| Resend | Delivery of the weekly summary email (optional, one-click unsubscribe). Receives your email and display name. | United States | View policy |
| Vercel | Website hosting and content delivery; processes requests and IP address. | United States | View policy |
| Render | Hosting of the API and background media processing; processes requests and IP address. | United States | View policy |
| Google Analytics (Google LLC) | Aggregated site usage analytics (Google Analytics 4 via Google Tag Manager) — only with your consent. | United States | View policy |
International transfer
Some of these providers are outside Brazil (for example, the United States and the European Union). When that happens, we seek partners offering adequate protection safeguards, in accordance with the LGPD. By using urShowList, you are aware of this international transfer, which is necessary to provide the service.
Cookies
We use only essential cookies (authentication) — we do not use tracking or advertising cookies. Details in the Cookie Policy.
How long we keep it
We keep your data for as long as your account exists. When you delete your account, your profile, logs, media and interactions are erased; residual backup copies may remain for a limited time, and contributions approved into the catalogue may be kept without any link to your identity. We also keep data when the law requires it.
Your rights (LGPD)
You can, at any time:
- Access and export your data — directly in Settings → Account (full export as JSON);
- Correct profile data in Settings → Profile;
- Delete your account and your data in Settings → Account;
- control the visibility of your content (public, followers or private);
- withdraw Spotify consent by disconnecting the integration;
- file complaints with the National Data Protection Authority (ANPD).
To exercise any right not available in the app, contact legal@urshowlist.com.
Children and teenagers
urShowList is not intended for children under 13. If we learn that we have collected data from a child without proper consent, we will remove that information.
Security
We adopt technical and organizational measures to protect your data. No system is 100% secure, but we work to reduce risks and respond quickly to incidents.
Changes to this policy
We may update this policy. Material changes will be announced in the app. The date at the top indicates the version in force.
Contact
Questions about privacy? Contact our data protection officer at legal@urshowlist.com or see the Contact page.