Privacy policy

Who is responsible

Tourspider, operated by HighPost, is the controller for the personal data described here. For privacy questions, contact us via our contact page.

What we collect

Account data you give us (such as your email and display name), data we generate as you use the site (such as the artists and venues you follow or the shows you mark as going), and basic technical data (such as device and usage analytics).

Why we use it

To provide and improve the service, personalise what you see, remember your follows and saved shows, secure the platform, and — where you've allowed it — send you relevant updates.

Legal bases

We process data to perform our contract with you (running your account), on the basis of our legitimate interests (improving and securing the service), and on the basis of consent where required (such as marketing or non-essential cookies).

Cookies and analytics

We use essential cookies to run the site, and analytics (Google Analytics) to understand how it's used.

When you click through to a ticket seller we record that click — which show and which ticket, and your account if you are signed in. If you are not, we recognise your browser by a random identifier (see below). It contains no name or email address.

What you view

When you view a show, artist, venue or genre page for more than five seconds, we record which page it was, how long you viewed it and, if you are signed in, your account. Your browser gets a random identifier for this, kept on your device and in a cookie of its own (ts_vid), so visits from the same browser can be grouped together. If you like an artist, venue or genre without being signed in, we record that against the same identifier, so we can see what visitors like.

We use it to work out which genres and artists you view most, and show those first — on the homepage and, if you create an account, when you pick your favourites. That only happens once the picture is clear, and what you like yourself always comes first. We also build anonymised overviews of it, to see which music visitors look for most.

We also record, once per visit, the page you arrived on, which site or campaign sent you, your kind of device (phone, tablet or computer) and the country, province and town you are roughly in. That location is derived from your IP address; the IP address itself is not stored. If your browser refuses to store the identifier, we count your visit with a scrambled value that changes every day and cannot be traced back afterwards. This shows us how many people visit from each region and what music they look for there.

If you have an account, you can add your year of birth, gender and postcode yourself; that is always optional and we never work it out. If you sign in with Google, you can also pre-fill them from your Google account on your account page: we read them once and keep only what you save yourself. Every night we summarise your account into a profile: your province and town, your favourite genres and venues (what you like yourself always comes first), how active you are and how you first found us. We use it to tailor tips and newsletters. If you are under 16, we make no profile. Only if you give separate permission on your account page and are 16 or older may we use a scrambled version of your email address to show you relevant shows through ads on other platforms (such as Instagram or Google). You can withdraw that permission with one click.

Individual page views are kept for 90 days; after that only daily totals without the identifier remain. An identifier unused for 13 months is deleted. The button below erases what we know about this browser and stops recording.

Sharing

We don't sell your personal data. We share it only with service providers who help us run Tourspider (such as hosting and analytics) under appropriate agreements, or where the law requires it. When you click through to buy a ticket, the seller processes your data under their own policy.

Photos you send

If you send concert photos, we keep the photo, the concert it belongs to, your account, and a one-time agreement to our photo terms. With that agreement we record your IP address, your browser, the name you chose and the time, so we can show that you gave permission. For every upload attempt we record an encrypted reference to your IP address to recognise abuse; that record is deleted after 90 days.

Location and camera data (EXIF) are removed from every photo before we store it. A photo we reject is deleted immediately. We keep the agreement while your photo is online and for one year after. If you delete your account, we delete your photos too. If you send photos without an account, we use your email address only to confirm it and to tell you about your photos; if you do not confirm it, we delete your photos after 48 hours and your agreement after 7 days. If you report a photo, we keep your report and — if you give them — your name and email address, to handle the report and reply to you.

Retention

We keep personal data only as long as needed for the purposes above or as required by law. Delete your account and we remove or anonymise your personal data, subject to legal retention obligations.

We also keep a record of the emails we send you — when, why, and the message itself — so we can answer questions about what you received. The content of a message is deleted after 90 days; a minimal record that it was sent is kept. Delete your account and that content is erased.

When you add a show to your calendar, we record which show, when, your IP address and the approximate location it implies, your browser and the technical details it sends with the request, and — if you are signed in — your account. We use this to block automated abuse. That record is deleted after 30 days.

Your rights

Under the GDPR you can access, correct, delete, restrict or port your data, and object to certain processing. To exercise these rights, contact us. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

We use appropriate technical and organisational measures to protect your data. No system is perfectly secure, but we take protecting your information seriously.

Changes

We may update this policy. The "last updated" date shows the current version.