Privacy Policy

Who we are

Dig The Gig (digthegig.live) is a non-commercial guide to underground gigs, operated by an individual who acts as the data controller for the personal data described below. If you have any questions about this policy or your data, email us at privacy@digthegig.live.

What we collect

• Account data: your email address, display name, and avatar. If you sign in through a third-party account, we receive your name and profile picture from that provider. If you register a passkey, we store its public key (never the private key — that stays on your device).
• Content you submit: gigs, venues, cover images, and feedback messages.
• Subscriptions and notifications: the genres and venues you follow, the gigs you save, and your notification preferences. If you turn on push notifications, we also store the subscription your browser creates for that device — its endpoint address, the public keys used to encrypt messages to it, and the browser's user-agent string — so we can deliver the alerts you asked for.
• Technical data: session cookies that keep you signed in, functional browser storage that remembers your gig filters (a cookie, with a local-storage fallback), a long-lived anonymous cookie used only to count a gig view once per visitor (no profile, no cross-site tracking), aggregated and anonymous usage and performance metrics, and signals used to tell real visitors from bots.

Why we process it

To run the service: signing you in, reviewing gig suggestions, showing published listings based on them and the venues you submit, sending the email and push notifications you subscribed to, and keeping the platform safe through moderation and abuse prevention. We do not use your data for advertising or profiling.

Legal bases

We rely on performance of a contract for account data and the content you submit (providing the service you signed up for), consent for the email and push notifications you subscribe to (withdraw any time by unsubscribing or turning push off for a device), and legitimate interest for security, bot protection, and aggregated analytics. We do not make automated decisions that have legal effects on you.

Where your data lives

Your data sits with the providers we use to run the service — hosting, the database, authentication, and file storage. Some of them process data outside the country you are in, including outside the European Economic Area. Where that happens, the transfer is covered by an adequacy decision, an approved transfer framework, or standard contractual clauses.

Who we share it with

Only with the providers that run the service, and only for that purpose: hosting, the database and authentication, file storage, email delivery, and the aggregated analytics and bot protection described above. If you choose to sign in through a third-party account, that provider is involved in the sign-in. If you turn on push notifications, the push service your browser depends on relays them — it sees that a message was sent to your device, but the contents are encrypted so it cannot read them. We never sell your data and we do not use ad networks.

How long we keep it

We keep your account data for as long as your account exists. You can delete it yourself in Settings, or email us and we will do it for you.

Deletion is not instant: the account is scheduled for erasure and stays recoverable for 30 days, so a change of mind or a mistaken click is not final — signing back in during that window cancels it, and we email you a reminder 7 days before the deadline. Your data is unchanged until then.

After the 30 days we erase your account, profile, avatar, saved gigs, subscriptions, notifications, and any push subscriptions. Published listings based on your gig suggestions, and venues you submitted, may stay on the site — they are part of the public guide other people rely on — but they are unlinked from you and remain managed by the editorial team.

Your rights

You can ask us to access, correct, export, or delete your data, or object to how we process it — regardless of where you live, we honor GDPR-style rights for everyone. Email privacy@digthegig.live and we will get back to you. If you think we have got it wrong, you also have the right to lodge a complaint with the data protection authority for your country.

Children

Dig The Gig is not directed at children under 15, and we do not knowingly collect personal data from them. If you believe a child has created an account, email us and we will delete it.

Changes to this policy

When this policy changes, we update the date at the top. If a change is significant, we will announce it on the site.