Privacy

Lineup shows you live music near a place you choose and lets you save the shows you like. It works without an account. This page says what it keeps, what it uses it for, and what it never does.

Without an account

Everything you do stays in your browser or the app on your device: the place you searched, the genres and acts you picked, the shows you saved or passed on, and your view settings. It is stored on your device only and is cleared when you clear the site’s data.

If you share your lineup, the set of shows you saved is stored on our servers under a random link id so the link works for whoever opens it. The link carries no name unless you have signed in and added one.

With an account

Signing in uses your email address and a link we send to it. There is no password. We keep your email, the name you optionally add, the shows you saved, and your genre and act preferences, so your lineup is there next time on any device. Your first name and handle identify you to friends and on shared lists.

Your interests are visible to people who follow you by default. In Profile → Friends & privacy, choose Private to hide your likes from friend indicators, your profile, and friends’ activity emails. This does not remove shows from lists you explicitly shared. Named lists are separate from personal likes: anyone given their link can sign in and edit, and each show records who added it. Lists shared with friends appear in their list library.

Location

If you tap “Use my location”, your browser or phone asks your permission and we use the coordinates to find shows around you. We keep the coordinates for that search and, if you sign in, the postcode or point your lineup was built around. We do not track where you go.

Analytics

We use PostHog to see which parts of Lineup get used, so we can improve it. Events are keyed on a random id, not your email. We do not use advertising trackers and we do not sell or share personal data with advertisers.

Who else handles it

Lineup runs on other people’s machines, and they are named here because “we keep it” is only true in the sense that we decide what happens to it. Supabase stores the accounts, saved shows and shared links. Vercel hosts the site and runs the nightly jobs; its servers keep short request logs, which include IP addresses. Resend sends the sign-in links and the alert emails. PostHog holds the usage events described above. If you link a phone number, Twilio sends the code. All of them are in the United States, so that is where your data is handled.

Where shows come from: Ticketmaster and public venue listings for the calendar,MusicBrainz and Apple’s iTunes catalogue for artist identity and previews. If you import your taste from Spotify, Apple Music, Last.fm or ListenBrainz, we read the artists you follow or play most and keep the names — never your password, and never anything we can play back to those services.

How long it is kept

Saved shows, preferences and your name stay until you remove them or ask us to delete the account. Usage events expire after a year. Shared lineups and named lists stay until the shows on them have passed or you ask for one to go. Emails we send are not stored after sending, beyond the delivery log Resend keeps.

Your rights

Wherever you are, you can ask for a copy of what we hold, ask us to correct it, or ask us to delete it: email sjfinegold@gmail.com from the address you signed in with. In the UK and EU you can also object to or restrict how we use it, and complain to your data protection authority if we get it wrong. In California you can ask what we collect and ask for it to be deleted — we do not sell or share personal information, and asking changes nothing about how Lineup works for you. Lineup is not built for, and does not knowingly keep data about, anyone under 13.

Cookies

Signing in sets one cookie so the site knows it is you; without it there is no account. Analytics keep nothing on your device until you say yes to the banner, and a browser sending “do not track” is never counted and never asked. Everything else — the place you searched, the shows you saved while signed out, your view settings — is ordinary browser storage on your own device, cleared when you clear the site’s data.

Third parties you reach through Lineup

Previews come from Apple’s iTunes catalogue and, when you ask for full tracks, YouTube; ticket links go to the seller’s site. Each of those has its own privacy policy once you are on it. Show and venue data comes from public listings and ticket sellers.

Your choices

You can remove any saved show at any time. To delete your account and everything stored with it, email sjfinegold@gmail.com from the address you signed in with and we will remove it.