Privacy policy

Moshradar runs moshradar.com from the UK and is the data controller for the personal data described here. You can reach us at moshradar@gmail.com. This policy covers the website, the emails it sends and the free tools. Buying merch is also covered by the terms of sale.

Our own counter

Once a page has been open for a second or so, it sends one small message back to us so the traffic figures count people rather than crawlers. It carries the page address, the page you came from, your screen width, how many days it has been since your first visit, a random number made for that one page load, and whether you have scrolled, tapped, clicked or typed on the page yet. If you do that later, a second message says so and quotes the number; nothing records what you did. It carries no name and nothing that outlasts the page. On the server your IP address is looked up, in databases we keep ourselves, for its country and for the network it belongs to (your broadband provider, say, or a cloud host); those two are kept, the address is not. Your IP address and browser are also mixed with the date and a secret into a digest that changes every day and cannot be reversed; that is how one person reloading is counted once. If your browser sends Do Not Track, nothing is sent at all. Page views are deleted after 400 days.

Google Analytics

The site also loads Google Analytics, which sets its own cookies and sends Google the pages you visit, along with a rough location worked out from your IP address. How Google uses that is described in Google's privacy policy, and you can stop it with the Google Analytics opt-out add-on or any content blocker.

Server logs and security

Like every website, our server keeps short-lived logs of each request (IP address, page, time and browser) to keep the site running, limit how fast one address can hit a form, and stop abuse. Errors are logged with the page and browser so they can be fixed, and those records go after 30 days.

Fonts, maps and embedded players

Fonts and icons are loaded from Google Fonts and Cloudflare's cdnjs, which see your IP address in the ordinary way of serving a file. Venue pages may show a map drawn with tiles from CARTO and OpenStreetMap. Artist pages may embed players from Spotify, YouTube and Bandcamp; loading one sends your IP address to that service and the player may set its own cookies. YouTube is loaded in its privacy-enhanced mode, which sets no cookie until you press play.

These are the cookies the site sets or allows:

Your browser can block or delete any of these; the site works without them, apart from staying signed in. Turn on Do Not Track to stop our own counter, and opt out of personalised advertising at Google Ads Settings.

When you register we keep your email address, a username, your password (stored as a hash we cannot read back), your home city, and whether you joined as a fan, an artist or a promoter, with the act or company name you gave. If you sign in with Google we ask Google for your email address and name and confirmation that the address is verified; we store the email and name and never see your Google password.

As you use the site your account also holds whatever you add to your profile (picture, bio, links, genres), the artists, venues and festivals you follow, your festival votes and “going” marks, the posters, logos and press kits you save, and your email settings. Artist and promoter accounts also hold what you sent to be verified and the gigs and pages you publish.

Your username, your public profile and anything you publish are visible to everyone. Your email address, city and settings are not. To close your account, email us: we delete it within 30 days, and any artist or promoter page you ran goes back to being unclaimed.

We send gig alerts for your city, alerts for the artists, venues and festivals you follow, on-sale reminders you asked for, a monthly report to artists and promoters, account emails such as password resets and order confirmations, and newsletters only if you ticked that box. Nothing is pre-ticked. Each kind has its own switch on your email preferences, and every email ends with a one-click unsubscribe. If you gave us an email address without making an account, the same applies and the unsubscribe link removes you entirely.

If you sign up on a band’s link page (moshradar.com/@band) to hear when it plays near you, we keep your email address and the town you gave, and email you when that band announces a gig near it. The band sees how many people signed up in each town, never who. If you also tick “Also give my email to the band”, the band can download your email address and town from its portal, and from then on its members are responsible for how they use the copy they took. Unsubscribe (the link at the foot of every email) and it is no longer in what the band can download.

When you opt in we record the time, your IP address and your browser as the evidence of consent. Each email contains a small image that tells us it was opened, and its links are rewritten so we know which were clicked. We use this only to see which emails are useful; we do not record your IP address or device when you open one. To stop the open record, set your email app to load images only when you choose.

The logo maker, poster maker, name generator, AI checker and quizzes work without an account. Saving a poster or a press kit records the IP address it was made from, alongside the save, so the feature can be rate-limited if it is abused. Quiz results are stored per play with no identifier, for the “you beat X% of players” line, and are deleted after 180 days.

The AI checker looks up the name you type on MusicBrainz, an open music database, so that name is sent to them. We count which act names are checked each day, to see which acts people are asking about. The count holds the name and nothing about who searched: no IP address, no account, no identifier. A search that looks like an email address, link or phone number is not counted by name. Counts are deleted after 400 days, and names searched only once after 90.

Anything you upload (profile pictures, band photos and galleries, fan photos of venues, footage for clip reels, poster artwork) is stored on our server and shown where you put it. Venue photos are reviewed by a person before they appear. Footage sent to the clip pipeline that is not turned into a clip is removed automatically.

When you buy merch, your name, email address, delivery address and phone number (if you give one) go to Stripe, which takes the payment, and to our print partner, which prints and posts the order. We never see your card number. We keep the order to handle returns, faults and disputes, and remove your name, phone number and address from finished orders after 365 days. The terms of sale and returns page have the rest.

Every listing links to an official ticket outlet. When you click one we record the click (the gig, the outlet, the time, your IP address and browser) so we can see which listings people use and tell real clicks from bots. Some of these links carry an affiliate tag, so the outlet pays us a small commission on a sale at no cost to you; the outlet never tells us who bought what. Once you are on the outlet's site, its own privacy policy applies. Hotel links near a venue may work the same way.

Some pages show adverts served by Google AdSense. Google and its partners use cookies to serve ads based on your previous visits to this and other websites. You can opt out of personalised advertising at Google Ads Settings and read how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.

Some of our free tools and gig guides show adverts from Adsterra instead. Adsterra receives your IP address, browser details and the page you are on to choose, serve and count those ads, and may use cookies to do it. How it handles that is described in Adsterra's privacy policy.

Artist, venue and festival pages are built from public sources: the ticket outlets' listings, Spotify, Wikidata and OpenStreetMap, and official websites and social profiles. That can include the names of the people in a band. If a page is about you and something is wrong, or you would rather it was not there, email us and we will sort it out; the corrections and removals section of the terms says how.

If we have emailed you about your venue, band or events

We sometimes write to venues, promoters and bands at an address published on their own website or profile, to tell them the site exists and that their gigs are listed. Each email says where we found the address, we write at most twice, and the opt-out link stops any further mail at once. We keep the address, the page it came from and your opt-out so that we do not write again. We rely on legitimate interests for this, and you can object at any time by replying or using the link.

We do not sell or rent personal data, and we share it only with the services that run the site:

• Google: Analytics, AdSense, sign-in, Fonts, and Gmail, which delivers our email.
• Adsterra: adverts on some tool and gig guide pages, as described under ticket links and adverts.
• Cloudflare (cdnjs): serves the icon font.
• Stripe and our print partner: payment, printing and postage for merch orders.
• Ticket outlets and embedded services: only when you click through to them or load their player or map.
• A band you chose to share with: your email address and town, only if you ticked “Also give my email to the band” on its link page.
• Our hosting provider: where the server and its backups live.

Some of these companies process data in the United States. Where they do, the transfer is covered by the UK's international data transfer agreement or the UK extension to the EU standard contractual clauses. We would also disclose data if the law required it.

Under UK data protection law you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct anything that is wrong;
• delete it, or stop using it in a particular way;
• give it to you in a form you can take elsewhere;
• stop sending you emails, which you can also do yourself from any email or your preferences.

Email moshradar@gmail.com from the address on your account and we will answer within a month. If you are not happy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

You must be 18 or over to create an account or buy anything. Anyone can read the site. If you believe a child has given us personal data, email us and we will delete it.

The date at the top changes whenever this page does. If a change affects what we do with your data in a way you would want to know about, we will email account holders before it takes effect.

Questions about this policy or your data: moshradar@gmail.com.