Privacy Policy

This explains what Houselights collects, why, and what you can do about it. Houselights is a small, independently-run app — your data is used to run the app for you, not sold or handed to advertisers.

What we collect

• Account info — your email address and password (handled securely by our authentication provider, not stored by us in plain text), and the username, bio, avatar, and banner photo you choose to set.
• Concert data you enter — artists, venues, dates, photos, notes, and ratings for shows you add, whether upcoming or past.
• Spotify data — only if you connect your Spotify account: your top artists, followed artists, and the access tokens needed to keep that connection working. You can disconnect at any time from account settings, which deletes those tokens.
• Location — to show concerts near you, we use either your device's location (with your browser's permission) or a ZIP code you enter. This is used to query nearby shows and is kept in your browser, not saved on our servers tied to your account.
• Social activity — who you follow and who follows you, feed posts you write, and reports you file (including the reason you gave).
• Two-factor authentication status — whether you've enabled it. The authenticator secret itself is managed by Supabase, our authentication provider — Houselights' own code never sees or stores it.

How we use it

To run the app: show your concerts, find shows near you, match nearby shows against artists you listen to on Spotify, show your feed and the activity of people you follow, and let other users find your public profile by username. Reports you file (or that are filed against your content) are used to review and, if warranted, remove content or restrict accounts. We don't use your data for advertising, and we don't sell it.

What's shared with third parties, and with whom

• Your approximate location (coordinates or ZIP-derived coordinates) is sent to Ticketmaster and SeatGeek's public search APIs to look up nearby shows — not your name, email, or account details.
• If connected, your Spotify data is fetched directly from Spotify using your own authorization — Houselights doesn't share your Spotify data with anyone else.
• Your account data (email, profile, concerts, photos) is stored with Supabase, our database and file storage provider.

What's public

If your account is public (the default), your username, avatar, bio, favorite artist, favorite song, songs you like, feed posts, and activity (shows added, ratings, favorite picks) are visible to anyone who looks up your profile. Your concert history — upcoming shows, past shows, notes, ratings, and photos — is always private and only visible to you, regardless of this setting.

If you set your account to private in account settings, that same profile content, feed posts, and activity are only visible to followers you've approved, plus you. New followers need your approval first.

One exception either way: follow relationships themselves (who follows whom) are visible to anyone, even for private accounts — it's only the profile content and activity that privacy controls.

Content moderation and reports

If you or your content is reported, an administrator reviews the report — including the reason given and who filed it — to decide whether to remove content or take other action. Feed posts, bios, and usernames also pass through an automated filter that blocks severe slurs and hate speech before they're posted. Administrator access is itself protected by two-factor authentication, which we require for that role specifically.

Your choices

• Edit or remove your profile info, bio, and photos at any time.
• Make your account private, or switch back to public, at any time.
• Unfollow anyone, or remove one of your own followers.
• Delete a feed post you've written.
• Enable or disable two-factor authentication from account settings.
• Disconnect Spotify at any time from account settings.
• Delete individual concerts you've added.
• Delete your account by contacting us — this removes your profile, concerts, photos, follows, feed posts, and connections.

Children's privacy

Houselights isn't directed at children under 13, and we don't knowingly collect data from anyone under 13.

Changes to this policy

If this policy changes, we'll update the date at the top of this page.

Contact

Questions about your data? Get in touch.