Privacy Policy

Last updated: February 20, 2026

the move (themove.events) respects your privacy. This policy explains what information we collect, how we use it, and your choices regarding your data.

1. Information We Collect

Information you provide

• Account information: When you create an account, we collect your email address and display name. If you sign in with Google, we receive your name, email, and profile picture from Google.
• User preferences: Your display settings, notification preferences, and default view choices.
• Favorites and votes: Events you favorite or vote on are stored to personalize your experience.
• Sponsored event submissions: If you submit a sponsored event, we collect the event details and contact information you provide.

Information collected automatically

• Usage data: We use Google Analytics (GA4) to collect anonymized usage data including page views, session duration, traffic sources, and general geographic region. This data is aggregated and does not personally identify you.
• Device information: Browser type, operating system, and screen size for optimizing the user experience.
• Cookies: We use essential cookies for authentication session management. Google Analytics sets its own cookies for analytics purposes.

Information we do NOT collect

• Precise location data (we do not use GPS or track your real-time location)
• Payment information (ticket purchases are handled by third-party sites)
• Social media activity beyond the sign-in process
• Contacts, photos, or other personal files

2. How We Use Your Information

Data	Purpose
Email address	Account authentication, event notifications (if opted in)
Favorites & votes	Personalize your experience, generate shareable lists
Preferences	Remember your display settings across sessions
Analytics data	Understand usage patterns, improve the service
Sponsored event details	Review, approve, and display promoted events

3. Data Storage and Security

Your data is stored securely using Supabase, a cloud database platform with built-in Row Level Security (RLS). This means:

• Your favorites, votes, and preferences are only accessible to your authenticated account
• Data is encrypted in transit (HTTPS/TLS) and at rest
• We use industry-standard authentication practices
• We do not store passwords directly; authentication is handled by Supabase Auth

4. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication (Supabase Privacy Policy)
• Google Analytics: Anonymized site usage analytics (Google Privacy Policy)
• Google Sign-In: Optional authentication method (Google Privacy Policy)
• Postmark: Transactional email delivery for notifications (Postmark Privacy Policy)
• Vercel: Hosting and serverless functions (Vercel Privacy Policy)

When you click a "Get Tickets" link, you are directed to third-party ticket platforms (Eventbrite, Ticketmaster, etc.). Those platforms have their own privacy policies which govern your interactions with them.

5. Cookies

We use minimal cookies:

• Authentication cookies: Essential for keeping you signed in. These are session-based and expire when you log out or close your browser.
• Google Analytics cookies: Used to distinguish users and sessions. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

We do not use advertising cookies or tracking pixels.

6. Your Rights and Choices

You have the right to:

• Access your data: View your favorites, votes, and account information through the app
• Delete your account: Contact us to request account deletion; we will remove all associated data
• Opt out of notifications: Disable email and push notifications in Settings
• Opt out of analytics: Use the Google Analytics Opt-out Add-on or enable "Do Not Track" in your browser
• Export your data: Contact us to request a copy of your data

7. Data Retention

• Event data: Scraped event listings are automatically deleted 30 days after scraping or when the event date has passed.
• Account data: Retained as long as your account is active. Deleted upon account deletion request.
• Analytics data: Google Analytics retains data per its own retention policies (default: 14 months).

8. Children's Privacy

The service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or your data, please contact us through the app's "Contact Us / Report a Bug" feature in Settings, or visit themove.events.