Privacy Policy

What Data We Collect

When you use Rave Tracker, we collect:

• Email address - Used for login and optional email notifications
• Display name - Shown in the navigation bar
• Password - Stored securely using Argon2id hashing (we never see your actual password)
• Session cookies - Used to keep you logged in
• Telegram chat ID (optional) - Only if you link Telegram for notifications
• Tracking rules - Artists, venues, and promoters you choose to track

How Your Data Is Stored

• Passwords are hashed using Argon2id, the algorithm recommended by OWASP for password storage. We cannot see or recover your password.
• Sessions use secure httponly cookies that cannot be accessed by JavaScript.
• All data is stored in a SQLite database on the server.

Data Retention

• Your account and tracking rules are kept until you delete them
• Sessions expire after 30 days of inactivity
• Event data is refreshed periodically and old events are removed

Third-Party Services

Rave Tracker interacts with:

• Resident Advisor (ra.co) - We fetch public event data from RA
• Telegram (optional) - If you enable Telegram notifications, we send messages via the Telegram Bot API using your chat ID

We do not sell or share your personal data with any other third parties.

Your Rights

You can:

• View and update your tracking rules at any time
• Disable notifications by unlinking Telegram or toggling email off
• Request deletion of your account (contact the administrator)

Contact

For questions about this privacy policy or your data, contact the site administrator.