Privacy policy.
Last updated: May 7, 2026
Showbase is an editorial live-event calendar. The only personal data we touch is what you actively give us — an email, a follow list, an authenticated session. No tracking pixels, no ad networks, no data sales. This page is the full list.
What we collect
- Email address — if you subscribe to the weekly digest. Stored to send you that digest. Removed on unsubscribe.
- Account data — if you sign in. Includes an authentication identifier from your provider, the artists/venues you follow, and a preference flag or two (e.g. digest cadence).
- Spotify connection — if you opt in. We read your followed artists and recent listens to suggest matching shows. We never write to your Spotify account. You can disconnect at any time from
/me. - Anonymous traffic data — we use Vercel Analytics + Speed Insights, which capture page views, referrers, and Core Web Vitals without setting tracking cookies and without identifying individual users.
What we don't collect
- No third-party advertising or retargeting cookies.
- No behavioral profiling.
- No payment information of any kind. Tickets are bought on the partner site, not on Showbase.
- No cross-site fingerprinting. Vercel Analytics is configured to anonymous mode.
Cookies + local storage
The site uses browser localStorage to remember a few preferences (e.g. saved events, hidden venues, dismissed onboarding banners). This data never leaves your device and is not synced unless you sign in. Authenticated sessions use a standard HTTP-only session cookie set by our auth provider.
Who we share data with
Operationally, we have to share some data with the infrastructure providers that run the site:
- Vercel — hosts the application and captures anonymous analytics.
- Supabase — stores account data, follow lists, and email subscriptions.
- Resend — delivers the weekly digest email when you subscribe.
- Spotify — only if you choose to connect; we exchange OAuth tokens with their API.
We do not sell, rent, or trade personal data. We do not feed it to advertising platforms.
Your rights
You can request access to, correction of, or deletion of any personal data we hold about you. The fastest way is to email hi@showbase.dev from the address on file. If you have an account, you can delete it yourself at /account; deletion is immediate and irreversible.
California residents (CCPA / CPRA), residents of the EU/UK (GDPR), and residents of any other jurisdiction with equivalent law have the right to request a copy of their data and to ask that it be deleted. Same email.
Children
Showbase is not directed at children under 13 and does not knowingly collect data from them. If you believe a minor has signed up, email us and we'll delete the account.
Changes
If we change this policy in a way that materially affects how we handle data, we'll update the date at the top of the page and, for subscribed users, send a note in the next digest.
Contact
Questions or concerns about privacy: email hi@showbase.dev.