Privacy Policy

When you browse

Server logs. Like every website, our servers record each request: your IP address, browser, the page asked for and when. We use these to keep the site running and to stop abuse.

Analytics. We count visits with Umami, which uses no cookies, builds no profile of you and doesn’t follow you to other sites. It records the page you viewed, the site that sent you, and your browser, device type and country, and we only ever see totals.

Images and maps. Event flyers are delivered through sizy.io, an image service that resizes them, and venue maps are embedded from OpenStreetMap. Your browser loads these directly from those services, so they receive your IP address and browser details, as any website you load something from does. Neither sets cookies on our pages.

When you make an account

• Your email address, to confirm it’s yours, sign you in, and send the emails you ask for. It is never shown on the site.
• Your username and photo, which are public. The photo is optional and stored by us at a small size.
• Your password, stored only as a one-way hash. We can’t read it.
• If you sign in with Google or Facebook: the name, email address and profile picture they share with us, and the tokens that link the two accounts. We don’t show your name. Until you upload a photo of your own, your picture may load from their servers.
• Your sessions: the IP address and browser of each device you’re signed in on, so a stolen sign-in can be spotted.
• What you do here: the events you say you’re going to, the venues you follow and which of their emails you want, and a record of the emails we’ve sent you so none goes twice.

Saying you’re going to an event is public. Your username and photo appear on that event’s page.

When you sign up for the weekend email

You can get a city’s weekend email without an account. We keep your email address, the city, when we sent the confirmation link and when you confirmed, and a record of which weekends we’ve emailed you so none goes twice.

Nothing but the confirmation email is sent until you press its button. If nobody does, the address is deleted a week after the link was sent. Unsubscribing, from the link in any of the emails, deletes the address and that record straight away.

What we do with it

We use it to run the site: to sign you in, show your username and photo where you’ve chosen to appear, send the emails you’ve turned on, keep accounts secure, and understand in total how the site is used.

We don’t sell your information, show ads, or share your information for advertising. Ticket sellers get nothing about you from us. When you follow a link to buy, our link doesn’t even tell them you came from here.

Who else handles it

Only the services that run the site for us, and only for that:

• hosting, database and backup storage providers, which hold the data above;
• an email delivery provider, which sends our emails and sees your address;
• sizy.io and OpenStreetMap, as described above;
• Google or Facebook, if you choose to sign in with them.

We’ll also disclose information when the law requires it, or when it’s needed to protect someone’s safety or our rights. If Day & Night is ever sold or merged, account data would move with it under this policy, and we’d tell you first.

Cookies

We set a cookie only when you sign in: a session cookie that keeps you signed in across the site and its city pages, plus short-lived ones while a Google or Facebook sign-in completes. There are no advertising or tracking cookies, and our pages set no cookies on anyone else’s behalf. Because the only cookies are the ones that make sign-in work, we don’t ask for cookie consent.

We don’t track you across other sites, and we don’t sell or share personal information. A Do Not Track or Global Privacy Control signal therefore has nothing to switch off here, and every browser is treated the same.

How long we keep it

Account information is kept until you delete your account. A weekend email address is kept until you unsubscribe, or for a week if it is never confirmed. Sessions expire after a week without use. Server logs are kept only for as long as they’re useful for running the site. After an account is deleted, copies in our backups are overwritten as the backups cycle.

Your choices, and deleting your data

You can change your username and photo, and unfollow venues or switch off their emails, from your account page. Every email also has an unsubscribe link; for the weekend email, that link is also how to have the address deleted.

To delete your account, use Delete account at the bottom of your account page. You’ll be asked for your password, or to sign in again with Google or Facebook, and then it’s gone straight away: your email, username, photo, sessions, the events you said you were going to, your follows, the record of emails we sent you, and the link to Google or Facebook. Copies in our backups are overwritten as the backups cycle.

If you can’t sign in, or want a copy of your data or something corrected, email hello@daynight.sh from the address on the account. If you signed in with Google or Facebook, say which. We’ll do it within 30 days and confirm when it’s done.

If you live somewhere that gives you further rights over your data, write to the same address and we’ll honor them.

Children

Accounts are for people 13 and over. If you think a child under 13 has made one, tell us and we’ll delete it.

Security and location

The site is served over HTTPS and passwords are hashed. No system is perfectly secure, but we take reasonable steps to protect what we hold. Your information is stored and processed in the United States.

Changes

When this policy changes we’ll update the date at the top. If a change affects how we use information we already hold, we’ll tell account holders by email first.

Contact

Questions or requests about your information: hello@daynight.sh. See also our Terms of Use.