Privacy Policy
Last updated: March 2026
1. Who We Are
FestivalMates is operated by Jules Kozak / FestivalMates. If you have any questions about this policy, contact us at operations@festivalmates.com.
2. What Data We Collect
Account information
- Email address, name, age, location, username
Profile information
- Bio, avatar, “looking for” preference, festivals you're attending
Spotify data
- Top artists and top genres (only with your explicit permission via Spotify Connect)
Usage data
- Festival check-ins, badges earned, schedule plans, budget plans, messages sent
Audio clips
- If you use ID Hunter, short audio recordings you choose to submit for track identification
Analytics
- Basic usage analytics (pages visited, feature usage)
3. How We Use Your Data
- To provide the FestivalMates service (matching, recommendations, lineup analysis)
- To personalize your experience (artist alerts, lineup explorer, raver archetype)
- To communicate with you (notifications, emails about your account)
We NEVER sell your personal data to third parties.
We NEVER share your Spotify data with other users — only derived compatibility scores are visible.
4. Third-Party Services
- Supabase: database and authentication hosting (EU/US)
- Vercel: website hosting
- Stripe: payment processing (for Pro subscriptions)
- Spotify API: music data (with your explicit permission)
- Google, Facebook, Apple, Discord: authentication (when you choose to sign in with these providers)
5. Your Rights (GDPR)
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and all associated data
- Export your data
- Withdraw consent for Spotify access at any time
To exercise any of these rights, contact operations@festivalmates.com.
6. Data Retention
We keep your data as long as your account is active. If you delete your account, all personal data is removed within 30 days.
7. Cookies
We use essential cookies only (authentication session). No tracking cookies. No advertising cookies.
8. Data Security
Your data is stored securely using Supabase (with row-level security policies) and transmitted over HTTPS. We implement access controls and regular security reviews.
9. Children
FestivalMates is for users 18 and older. We do not knowingly collect data from minors.
10. Changes
We may update this policy. Significant changes will be communicated via email to the address associated with your account.