Privacy policy

Víctor Piñeiro Parra, owner of myconcertwall.com, is the controller of your data. For anything about it, write to hello@myconcertwall.com.

• Your account: e-mail address, name, profile photo, username, home city and country, and your password stored only as an irreversible hash. If you sign in with Google, the identifier Google gives us for your account, plus the name and photo it shares.
• Your wall: the concerts you add and everything you write in them — posters, photos, setlists, notes, price, who you went with, reviews, trips — and your settings.
• Friends: friendships, requests, invitations, blocks, tags on other people's concerts and concerts shared between walls.
• Security and use: when and how you sign in, the days you used the app, failed sign-in attempts (the e-mail address and the network address involved), and the links sent to confirm your address or reset your password, stored only as a fingerprint.

We do not ask for, or want, any special category of data (health, beliefs, and so on). Please do not put any in your notes.

• To give you the service you signed up for — your wall, your account, friends, the e-mails the service needs (confirming your address, resetting your password): performance of the contract (article 6.1.b GDPR).
• To keep accounts and the service safe — limiting repeated failed sign-ins, detecting abuse — and to know, in totals, how many people use the app so it keeps working well: our legitimate interest (article 6.1.f GDPR), which does not override yours because the data is minimal and kept briefly.

No automated decisions with legal effects are taken about you, and there is no profiling.

You choose it in your profile: only your friends, anyone with the link, or no one. Even when your wall is visible, price, notes and who you went with are never shown to anyone else, and your trips and home city are only shown to friends. Your friends see your name, photo and username; people who look you up by username see only those.

These companies process data only on our behalf and under contract, to run the service:

• Vercelhosting of the website and application · servers in Frankfurt (EU)
• Neondatabase · Frankfurt (EU)
• Cloudflarestorage of posters and photos (R2) and the domain's DNS · EU
• Resendsending the service's e-mails · United States
• Googleonly if you choose to sign in with Google · under its own policy

When a provider is based in the United States, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses. The hosting provider keeps technical request logs (such as the network address) for a short time for security.

To find posters, setlists, dates or city coordinates, our server asks setlist.fm, MusicBrainz, Ticketmaster, OpenStreetMap (Nominatim), the Internet Archive and promoters' websites. It only sends what is being searched for — an artist, a city, a date — never your e-mail, your name or anything that identifies you.

• Your account and your wall: while your account exists. When it is deleted, its data and images are deleted with it.
• The days you used the app: 400 days.
• Failed sign-in attempts and their network addresses: 24 hours at most.
• Confirmation and password links: they expire in 7 days and 1 hour respectively and cannot be used again.

You can ask to access, correct or delete your data, to restrict or object to its use, and to take it with you. Write to hello@myconcertwall.com from the address of your account; we answer within one month. You can download a full copy of your wall at any time from Data and backups in the app, and edit your profile yourself.

If you think your data is not being handled properly, you can complain to the Spanish Data Protection Agency (aepd.es).

You must be at least 14 to create an account. If you are younger, you need your parents or guardians to agree.

If this policy changes in anything that matters, we will say so in the app before the change applies. The date at the top is always that of the latest version. Cookies and browser storage are explained in the cookie policy.