1. Introduction
Welcome to Tracklist ("we," "us," "our," or "Tracklist"). We are committed to protecting your privacy and being transparent about how we collect, use, and share your information.
This Privacy Policy explains:
- What information we collect from you
- How we use your information
- How we share your information
- Your rights and choices
- How we protect your information
By using the Tracklist platform, mobile application, and related services (collectively, the "Service"), you agree to the collection and use of information as described in this Privacy Policy.
Age Requirement: You must be at least 18 years old to use our Service. We do not knowingly collect information from individuals under 18.
2. Information we collect
2.1 Information you provide directly
Account information:
- Name and username
- Email address (if provided)
- Phone number (for authentication)
- Password (encrypted, if you set one)
- Profile photo (optional)
- City/location (general location you provide, not GPS tracking)
- Bio and profile information (optional)
Content you create:
- Ratings and reviews of events, artists, and venues
- Photos and videos you upload
- Comments on other users' content
- Messages sent through direct messages and group chats
- Posts and interactions with other users
Communications:
- Messages you send to us (support requests, feedback)
- Survey responses
- Communications preferences
2.2 Information we collect automatically
Usage information:
- Events, artists, and venues you view or rate
- Search queries
- Features you use and interactions with the Service
- Time, frequency, and duration of your activities
- Content you view or engage with
- Mutual connections and social activity within the Service
Device information:
- Device type, model, and operating system
- Device identifiers (such as advertising ID)
- IP address
- Mobile network information
- Time zone settings
- App version
Location information:
- We collect only the city/location you manually enter in your profile
- We do NOT collect precise GPS location or track your movements
- We do NOT collect EXIF data or metadata from photos or videos you upload
- We may infer general location from your IP address for security purposes
2.3 Information from third parties
Authentication services: If you sign in using Google Firebase Authentication with third-party providers (Google, Apple, etc.), we receive basic profile information such as your name and email address.
Publicly available information:
- Information about artists, venues, and events from publicly available sources
- Social media handles and public profiles you choose to link
2.4 Cookies and similar technologies
We use cookies and similar technologies to:
- Keep you logged in
- Remember your preferences
- Analyze how you use the Service
- Prevent fraud and improve security
You can control cookies through your device or browser settings, but disabling cookies may affect your ability to use certain features.
Types of cookies we use:
- Essential cookies: Required for the Service to function
- Analytics cookies: Help us understand how users interact with the Service
- Preference cookies: Remember your settings and preferences
- Advertising cookies: Not currently active. We may introduce advertising cookies in the future, at which point this Policy will be updated.
3. How we use your information
3.1 Provide and improve the Service
- Create and manage your account
- Enable you to rate, review, and discover music events
- Facilitate communication between users
- Personalize your experience and recommendations
- Display your content to other users based on your privacy settings
- Develop new features and improve existing ones
- Analyze usage patterns and trends
3.2 Communication
- Send you notifications about activity on your account
- Respond to your questions and support requests
- Send important Service updates and changes to our policies
- Send promotional content (with your consent, where required)
- Notify you about events, artists, or venues you follow
3.3 Safety and security
- Verify your identity and prevent fraud
- Detect and prevent spam, abuse, and other harmful activity
- Enforce our Terms of Service
- Comply with legal obligations
- Protect our rights, property, and users
- Investigate and respond to violations
3.4 Advertising and marketing
Tracklist does not currently display advertisements or conduct targeted advertising. The advertising-related data uses described below are not currently active and represent intended future capabilities. This Policy will be updated before any advertising practices are introduced.
When and if advertising is introduced, we may use your information to:
- Display advertisements on the Service
- Provide targeted or interest-based advertising based on your activity
- Measure advertising effectiveness
- Conduct marketing campaigns and promotions
3.5 Analytics and research
- Analyze usage patterns and trends
- Conduct research and development
- Create aggregated, anonymized data sets
- Generate insights about the live music ecosystem
- Measure Service performance
3.6 Personalized features
- Generate year-in-review summaries of your activity
- Create compilations and highlights of your history
- Provide personalized recommendations
- Show you content relevant to your interests
4. How we share your information
4.1 Public information
The following information is publicly visible to all users by default:
- Your username and profile photo
- Your bio and general location (city)
- Your mutual connections (unless you make this private)
- Your ratings and reviews of events, artists, and venues
- Photos and videos you post
- Comments you make on public content
- Your activity feed (can be adjusted in settings)
4.2 With other users
- Direct messages and group chats are only visible to participants
- Your mutual connections may see your activity depending on your privacy settings
- Users can view your profile and public content
4.3 With service providers
We share information with the following third-party service providers who help us operate the Service:
- Google Firebase: User authentication, cloud hosting, and data storage
- Analytics providers: Help us understand Service usage patterns
- Push notification services: Deliver notifications to your device
- Content moderation tools: Help detect prohibited content
- Email service providers: Send transactional and support emails
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
4.4 With advertising partners
Tracklist does not currently share data with advertising partners and does not sell personal information. This section describes intended future capabilities. This Policy will be updated before any data sharing with advertising partners begins.
We do not share your name, email address, or direct messages with advertisers.
4.5 With venues, artists, and labels
Our partners (venues, artists, and labels) may receive:
- Aggregated, anonymized analytics about user activity and trends
- Public reviews and ratings that users post on their pages
- Statistics about engagement with their content
Partners do NOT receive:
- Individual user contact information
- Private messages or personal data
- Identifiable information without your explicit consent
4.6 Business transfers
If Tracklist is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and provide options regarding your information.
4.7 Legal requirements and safety
We may disclose your information if required to:
- Comply with legal obligations, court orders, or subpoenas
- Enforce our Terms of Service
- Protect the rights, property, or safety of Tracklist, our users, or the public
- Prevent fraud, security issues, or technical problems
- Respond to law enforcement requests
4.8 With your consent
We may share your information in other ways with your explicit consent.
4.9 Aggregated and anonymized data
We may share aggregated or anonymized information that cannot reasonably be used to identify you for business purposes, research, or public reporting.
5. Your rights and choices
5.1 Account information
- Access: You can access your account information through your profile settings
- Update: You can update your profile information at any time
- Delete: You can delete your account through account settings in the app (Settings → Delete Account)
5.2 Privacy settings
You can control:
- Who can see your mutual connections list
- Who can message you
- Notification preferences
- Whether your activity is visible to others
- Visibility of your ratings and reviews
5.3 Communication preferences
- Push notifications: Control through device settings or in-app preferences
- Email: Unsubscribe from promotional emails via the link in each email
- In-app notifications: Manage in your notification settings
You cannot opt out of Service-related communications (account verification, security alerts, Terms updates).
5.4 Advertising choices
Tracklist does not currently display targeted advertising. If advertising is introduced in the future, you will be provided with appropriate opt-out controls and this Policy will be updated.
5.5 Cookies
You can control cookies through your browser or device settings. Note that disabling certain cookies may affect Service functionality.
5.6 Do Not Track
Some browsers have "Do Not Track" features. We currently do not respond to Do Not Track signals, but you can use the privacy controls described above.
5.7 Data portability
You may request a copy of your data in a machine-readable format by contacting [email protected].
5.8 California residents (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to know: Request information about the personal information we collect, use, and disclose
- Right to delete: Request deletion of your personal information, subject to certain exceptions
- Right to opt-out of sale: Tracklist does not currently sell personal information. If this changes, we will provide a clear opt-out mechanism and update this Policy.
- Right to non-discrimination: You will not receive discriminatory treatment for exercising your privacy rights
To exercise these rights, contact [email protected] with "California Privacy Rights" in the subject line. We will verify your identity before processing your request and respond within 45 days. We may extend this period by an additional 45 days when necessary, with notice to you.
6. Data retention
We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy.
Retention periods:
- Account information: Until you delete your account, plus up to 90 days for backup purging
- Content (ratings, reviews, posts): Deleted upon account deletion. You may also request deletion of specific content by contacting [email protected].
- Messages: Direct messages and group chats are stored for the duration of your account. The Service does not currently support in-app message deletion. To request deletion of specific messages, contact [email protected].
- Usage data: Typically 24–36 months
- Legal compliance data: As required by applicable law
After account deletion, some information may remain in backup systems (up to 90 days), aggregated analytics (anonymized), or as required for legal hold purposes.
You can request complete deletion of your data by contacting [email protected]. Some data may need to be retained for legal, security, or fraud prevention purposes.
7. Data security
We implement reasonable security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These include:
- Encryption of data in transit using SSL/TLS
- Encryption of passwords and sensitive data at rest
- Secure cloud storage infrastructure via Google Firebase
- Regular security assessments
- Access controls and authentication
- Content moderation tools to detect harmful content
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.
Data breach notification: In the event of a data breach that is reasonably likely to result in risk to your rights or interests, we will notify affected users without undue delay and in accordance with applicable law. Notification will be provided via email to the address associated with your account, or through a prominent notice on the Service.
What you can do:
- Use a strong, unique password
- Enable two-factor authentication if available
- Do not share your login credentials
- Log out of shared devices
- Report suspicious activity immediately to [email protected]
8. International data transfers
The Service is operated in the United States and is intended for users in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States, which may have different data protection laws than your country.
By using the Service, you consent to the transfer and processing of your information in the United States.
9. Children's privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18.
If we become aware that we have collected information from someone under 18, we will take steps to delete that information promptly.
If you believe we have collected information from someone under 18, please contact us at [email protected].
10. Third-party links and services
The Service may contain links to third-party websites, ticketing platforms, streaming services, and other external sites. This Privacy Policy does not apply to those third-party services.
We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you visit.
Examples of third-party services:
- Ticketing platforms (when you click to purchase tickets)
- Social media platforms
- Streaming services
- Venue and artist websites
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will:
- Update the "Last Updated" date at the top of this Policy
- Post the revised Policy on the Service
- Notify you through the Service or by email for material changes
Material changes include changes to how we collect, use, or share your information; changes to your rights and choices; and any introduction of new data practices such as advertising.
Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy. If you do not agree, you must stop using the Service and may delete your account.
12. Contact us
If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us:
- Email: [email protected]
- Platform: tracklist.social
- Subject line: Privacy Inquiry
We will acknowledge your inquiry promptly and respond within 45 days.
13. State-specific rights
13.1 California residents
See Section 5.8 for detailed California rights under CCPA.
"Shine the Light" Law: California residents may request information about disclosures of personal information to third parties for their direct marketing purposes once per year.
13.2 Other U.S. states
If you reside in a state with data privacy laws (Virginia, Colorado, Connecticut, Utah, and others), you may have additional rights similar to those described for California residents. Contact us at [email protected] to exercise these rights.
14. Additional information
14.1 Content you share
Remember that information you share publicly on the Service can be viewed, collected, and used by others. Be mindful of what you post:
- Comments and reviews are public and associated with your profile
- Your ratings and reviews may be visible to other users
- Photos and videos you upload are stored by us but we do not collect or process any embedded metadata
14.2 Third-party authentication
If you use Google Firebase Authentication with third-party providers (Google, Apple):
- Those providers have their own privacy policies
- We only receive basic profile information they share with us
- Review their policies to understand how they handle your data independently
14.3 Automated decision-making
We use automated systems to:
- Moderate content for policy violations
- Personalize recommendations
- Detect spam and abuse
These systems use algorithms and may incorporate machine learning. You can contact us for information about how these systems may affect you.
14.4 Legal basis for processing
We process your personal information on the following legal bases:
- Contract: Processing necessary to provide the Service you have signed up for
- Consent: Where you have given us specific permission, such as for promotional communications
- Legitimate interests: To operate, improve, and secure the Service, and to communicate with you about your use of it
- Legal obligation: Where processing is required to comply with applicable law
14.5 Analytics and tracking
We use analytics services to understand how users interact with the Service. These services may collect:
- Pages viewed and features used
- Time spent on the Service
- Click patterns and navigation paths
- Device and operating system information
This helps us improve the Service and user experience.
By using the Service, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.