Privacy policy

EventTimes (eventtimes.co.uk and eventtimes.co) is run by Emily Dyson, who is the data controller for this site under UK GDPR. Contact: hello@eventtimes.co.uk.

The site uses Google Analytics 4 to count visits and see which pages are read. Google Analytics sets first-party cookies (named _ga and _ga_*) and records pages viewed, approximate location derived from your IP address, device and browser type, and the site that referred you. The figures are used only in aggregate, to decide which venues and pages to work on.

On show and artist pages it also counts the steps of the “Get the times by email” box: whether the box came into view, whether the link to it near the top of a show page was tapped, whether a sign-up was sent, refused, or stopped by an unticked box or an empty or mistyped address, which kind of page it was on, and how many days away the show was. On the page the confirm button leads to, it counts that a sign-up was confirmed and which kind of page it came from, once per confirmation: that page’s address carries a random one-off reference, not stored with your sign-up, which your browser’s local storage keeps so that reloading the page does not count it again. It never receives the email address, the confirmation code or anything typed into the box.

Google’s explanation of how it uses this data is at policies.google.com/technologies/partner-sites. You can block it with the Google Analytics opt-out add-on or your browser’s cookie settings.

The site carries ads served by Google AdSense. Google and its partners use cookies and similar technologies to serve ads, to limit how often you see the same ad, and to measure whether ads work. Where you have agreed to it, ads can be personalised from your activity on this and other sites; otherwise they are based on the page you are reading and your approximate location.

• Manage or turn off personalised ads at adssettings.google.com.
• Opt out of personalised ads from many third-party vendors at youronlinechoices.com.
• How Google uses data from sites that show its ads: policies.google.com/technologies/ads.

Advertisers do not choose or influence any time, curfew or policy shown on this site.

Some pages link to retailers (such as Amazon and eBay) and to the official ticket seller. Some of these are affiliate links: if you buy after clicking, the site may earn a commission at no extra cost to you. Following a link takes you to that company’s site, where its own privacy policy and cookies apply. Affiliate links are labelled on the page where they appear. A show email can link to a page section that has them (see Show emails), but never contains one itself.

The report forms on venue and show pages send the times you enter, the show they belong to, and any note you type. They do not ask for your name or contact details, so do not put personal information in the note. Reports are stored in a database hosted in London (Supabase, AWS eu-west-2), read by the owner, and either published as an anonymous data point with a changelog entry or declined.

The one-tap “live report” buttons remember which buttons you have already tapped for that show, and when you last tapped one, in your browser’s local storage, so the same report is not sent twice and the buttons rest for 10 minutes after a tap. That record stays on your device; clear it by clearing site data in your browser.

If you use the “Get the times by email” box on a show or artist page and tick the consent box, the site stores:

• your email address (in lower case) and which show it is for;
• the sentence next to the box you ticked, which version of it was shown, and when you ticked it;
• two random codes, one for the confirmation link and one for the unsubscribe link;
• which kind of page the box was on (a show page or an artist page);
• how many confirmation emails have been sent;
• when you confirmed, when you unsubscribed, and when each email was sent.

A sign-up that ticked the optional shopping box the form used to offer (below) also stores that box’s sentence, its version and when it was ticked.

It is used only for up to three emails about that one show — what to bring (up to three days before), the night’s times (on the day), and a question about what time the act came on (the morning after). A sign-up made on the day of the show gets the last two only. Nothing more is sent until you open the link in the confirmation email (which shows what is on record for the show at that moment) and press the button on that page. Your address is never sold, shared for marketing, or added to any other list.

The emails carry no ads and no affiliate links. The sign-up form used to offer a separate, optional shopping box, unticked to start; it no longer does. A sign-up that ticked it keeps exactly what its sentence named until the address is deleted: the what-to-bring email can include a card, labelled “Affiliate links · we may earn a commission”, that links to the show page’s “What to bring” section and, only where that sentence named records and merch, the email the morning after can include one that links to its “Records and merch” section. The links in those sections are Amazon and eBay affiliate links: if you buy through them the site may earn a commission, at no extra cost to you. To drop the cards but keep the emails, email hello@eventtimes.co.uk from the address you signed up with, or unsubscribe and sign up again.

To stop the box being used to flood someone else’s inbox, each request also leaves a short record: a keyed hash of the IP address it came from, a keyed hash of the email address, and whether a confirmation email was sent. A keyed hash is a code made with a secret key the site holds; without that key it cannot be matched back to an address. These records are used only to count requests, are kept apart from the list, and are deleted after 2 days.

The limits: one sign-up gets at most three confirmation emails, never two within 10 minutes; one address gets at most three confirmation emails in 24 hours, across all shows; one IP address can make five requests an hour; and there is a cap for the whole site. A request over a limit sends no email.

Emails are sent through Resend (Resend, Inc.), which processes your address and the message only to deliver it, under its data processing terms. Resend may process data in the United States; transfers rely on the UK’s adequacy regulations or standard contractual clauses. The list itself is stored with the rest of the site’s data (Supabase, AWS eu-west-2, London).

Retention: every row is deleted automatically 30 days after the show. A sign-up that is never confirmed is deleted after 7 days, and its link stops working then.

When a sign-up is deleted (by the retention above, or straight away if its confirmation email could not be sent), a count of it is kept without the email address, the codes or the show: when it was made, confirmed and unsubscribed, which kind of page it came from, the kind of mail service, read from the part of the address after the @ (Gmail, Microsoft, Yahoo, Apple or other; AOL and Sky count as Yahoo), how many days before the show it was made, how many confirmation emails went, which of the three emails were sent, when and why it was deleted, and whether it was the site owner’s own test. These counts are used only in aggregate, to measure each step of the sign-up: how many are confirmed, from which kind of page, at which mail services. Each count is deleted 13 months after its sign-up was deleted, so a month can be set beside the same month a year earlier.

Links in show emails that lead back to this site carry tags (utm_source, utm_medium, utm_campaign) naming which of the emails the link was in, so Google Analytics can count visits from each one. The tags say nothing about who you are. The confirm and unsubscribe links carry none. Replies to a show email go to hello@eventtimes.co.uk.

Unsubscribe or delete: every show email has an unsubscribe link, which opens a page with a single Unsubscribe button. If your mail app shows its own Unsubscribe button for these emails, that works too. To have your address deleted before the 30 days are up, email hello@eventtimes.co.uk from that address.

The site is hosted by Vercel. Like any web server, it briefly logs requests (IP address, page requested, browser and time) to keep the site running and to stop abuse. These logs are not used to identify anyone and are kept only as long as Vercel’s standard retention.

• Analytics and advertising cookies: your consent, where the law requires it, and legitimate interest in running and funding a free site.
• Reader reports: legitimate interest in keeping the published times accurate. Reports are kept while the show page exists.
• Show emails: your consent, given by ticking the box and confirming by email. Withdraw it at any time with the unsubscribe link. The shopping cards, for sign-ups that ticked the shopping box the form used to offer, are a separate consent: an email to us stops just those. Kept until 30 days after the show (7 days if never confirmed).
• Show email request records (the keyed hashes above): legitimate interest in stopping the form being used to send unwanted email. Deleted after 2 days.
• Counts kept when a show email sign-up is deleted (no address): legitimate interest in knowing whether the emails reach the people who asked for them. Deleted 13 months after the sign-up was deleted.
• Server logs: legitimate interest in security and reliability.

Under UK GDPR you can ask for a copy of personal data held about you, ask for it to be corrected or deleted, or object to its use. Email hello@eventtimes.co.uk. Because the site holds no accounts or names, say which page and date a report was sent from so it can be found. For show emails, write from the address you signed up with. If you are unhappy with the response you can complain to the Information Commissioner’s Office at ico.org.uk.

The site is not aimed at children under 13 and does not knowingly collect data from them.

When this policy changes, the date at the top changes with it. See also the terms of use and contact page.