Privacy Policy
Earshot turns what you listen to into shows near you, and helps you go with friends. This page explains what we collect to do that, who can see it, how long we keep it, and how to take it with you or delete it.
The short version
- We keep artist-level totals from your music services, like “38 plays of Japanese Breakfast this month”. Never the list of tracks you played.
- Your music connections are read-only. We never post for you or change your library.
- Saves and “Not for me” are always private. You choose who sees the shows you mark Interested.
- We store your area as a neighborhood or city, rounded to about a kilometer. We never use precise GPS.
- We don’t sell your data or show ads.
- You can download everything or delete your account from Settings, as easily as you signed up.
What we collect
What you give us
- Account: your name, username, email address, profile photo if you add one, and that you’re 18 or older. If you sign in with Google, Apple or Facebook, we get your name and email from them. Facebook sign-in never shares your friend list with us.
- Your area: the neighborhood, city or ZIP code you choose, with coordinates rounded to two decimal places, and your distance preference.
- What you do in Earshot: shows you mark Interested, save or hide (with the reason, if you give one), friends and people you follow, blocks, Plans, RSVPs, whether you have tickets, Plan chat messages and reactions, the shows you’ve been to and your ratings, and reports you file.
- Settings: your privacy, notification, display and discovery choices.
- Optional answers: if you answer the one question when deleting your account, we keep that answer with no link to you.
From music services you connect
When you connect Spotify, Apple Music or Last.fm, or import a Spotify or Google Takeout file, we read your listening and keep only artist names, play counts for the last 30 days and 12 months, and genres. Imported files are read in your browser; the file itself never reaches our servers. We store access tokens for connected services encrypted, and use them only to refresh your artist totals.
Automatically
- Devices: a random ID stored in your browser and a coarse label like “MacBook · Chrome”, so you can see where you’re signed in and get new sign-in alerts.
- Approximate location from your IP address: used once to suggest your area. We don’t store it.
- Product analytics: which screens and buttons are used, tied to an internal ID, never to your name or what you listen to. You can turn this off in Settings → Your data.
- Error reports: technical details when something breaks. Before they’re sent we remove sign-in cookies, IP addresses, invite links, web addresses’ query details and anything you submitted in a form, and keep only an internal ID for you.
- Your time zone, so notifications respect quiet hours.
Contacts
If you choose to find friends from your contacts, each email address and phone number is turned into a one-way code on your device, and only the codes are checked. We never receive or store your address book or the codes. You’ll only find people who turned on “Find me by email” or “by phone”, which is off by default.
How we use it
- To recommend shows, with a specific reason for each (“You played X 38 times this month”).
- To run Plans, friends, follows, chat and notifications.
- To keep Earshot safe: reviewing reports, stopping ticket scams (payment links are blocked in Plan chat), and alerting you to new sign-ins.
- To understand which features work, using analytics you can turn off.
If Earshot earns money when you buy tickets through a link to the seller, that doesn’t change what we recommend or what you pay, and we don’t send the seller anything about you.
Who can see what
- Friends (people who both accepted) can see your taste match and invite you to Plans.
- Shows you mark Interested are visible to the audience you choose in Settings: everyone, followers and friends, friends only, or only you. You can change it for a single show.
- Your photo and taste profile each have their own visibility setting.
- Plans and Plan chat are visible only to the people in that Plan. Anyone with a Plan’s invite link can see the show, the host’s first name and photo (if the host shows it to everyone), and how many people are going, but not who. The host can reset the link.
- Saves, “Not for me”, ratings and your show history are only ever visible to you.
- Follower counts are never shown publicly.
Who we share it with
We don’t sell personal data or share it for advertising. We share it only with services that run Earshot for us, under contracts that limit them to that purpose:
| Service | What for |
|---|---|
| Supabase | Database, sign-in and file storage |
| Vercel | Hosting. Also gives us an approximate city from your IP address to suggest your area |
| Resend | Sending email |
| Sentry | Error reports, with personal details removed before sending |
| Mapbox | Turning what you type into a neighborhood or city |
| Your map tile provider | Map images for the map view (it sees your IP address) |
| Apple, Google or Mozilla push services | Delivering browser notifications you turn on |
Services you choose to use get what that use requires: the music service you connect, the sign-in provider you pick, and the ticket seller whose site you open. For 30-second song previews we send only the artist’s name to Apple’s iTunes search, from our server, never anything about you.
We may disclose information if the law requires it, to protect someone’s safety, or as part of a merger or sale of the business, in which case this policy would still apply to your data.
How long we keep it
| Data | Kept for |
|---|---|
| Your profile, friends, Plans, signals and settings | Until you delete your account, then permanently removed after a 30-day grace period |
| Artist-level listening totals (never individual tracks) | Until you delete listening data or your account |
| Music service access | Until you disconnect the service or delete your account |
| Plan chat messages | Until you delete them or your account. After an account is deleted its messages show as “Message deleted” |
| Show history and ratings | Until you remove an entry or delete your account |
| Notifications we sent you | 90 days |
| Product analytics (if you haven’t turned them off) | 13 months |
| Devices you’ve signed in on | 1 year after last use |
| Previous usernames | 30 days after you change it |
| Contact-matching record (a count only, never the contacts) | 2 days |
| Reports you file | Kept for safety. If you delete your account, your name is removed from them |
| Reports about you | Deleted with your account |
| Deletion survey answer | Kept without any link to you |
Your choices and rights
- Download your data as a file, any time: Settings → Your data.
- Delete listening data or reset your taste profile without deleting your account.
- Disconnect a music service, with the option to delete what we learned from it.
- Delete your account: Settings → Pause or delete. You have 30 days to change your mind, then it’s permanently removed.
- Control notifications per category, for push and email. Every notification email has a one-click unsubscribe (security emails, like new sign-in alerts, always come).
- Turn off analytics in Settings → Your data.
Depending on where you live, you may also have the right to access, correct, or object to how we use your data, and to complain to a data protection authority. Email privacy@[your-domain] and we’ll respond within 30 days.
Cookies and browser storage
We use only what Earshot needs to work: cookies that keep you signed in and protect sign-in and music connections, a cookie that remembers a Plan invite while you sign up, and browser storage for your device ID, an anonymous analytics ID used before you sign up, a friend invite you’re accepting, and when you last opened Going out. No advertising or cross-site tracking cookies.
Security
Data is encrypted in transit, music service tokens are encrypted at rest, and every table enforces who can read each row. You can add a passkey or an authenticator app, and we ask you to confirm it’s you before sensitive changes. If a breach ever affects your data, we’ll tell you as the law requires.
Age
Earshot is for people 18 and older. If you believe someone under 18 has an account, report it and we’ll review it.
Changes
If we change this policy in a way that matters, we’ll tell you in the app or by email before it takes effect.
Contact
[Company legal name], [Registered address]. Email privacy@[your-domain]. See also our Terms.