Privacy

Without an account

You can browse every show without signing in. The shows you mark (Interested, Going, Got tix) are kept against a random id in a cookie on your device, so they're there next time. Apart from the visit counts below, nothing else about you is stored.

We count visits so we know how the site is doing. Each visit adds one to a daily total for the page. To count each visitor once a day, we keep a scrambled code made from your network address, your browser and a random value that changes every day; your address itself is never kept. The next day those codes and that day's random value are deleted, and only the day's totals remain, so nothing links one visit to you or to another day.

With an account

Your email address (or phone number, if you sign in by text), the name and handle you choose, the shows you mark, the artists and venues you follow, your friends and friend requests, shows friends send you, your notification settings, and the date you agreed to the Terms and this policy.

If you sign in with Google, Google tells us your name, email address and profile photo, and gives us a sign-in token that proves it's you; we keep those with your account. We never see your Google password, and we don't get your contacts, email or anything else in your Google account.

If you add a passkey, your device keeps its private half and never sends it to us. We keep only its public half, the name of the device you made it on and the date, so we can check it's you when you sign in. Your face or fingerprint never leaves your device. You can remove a passkey in Settings.

Sign-in uses a one-time code: there is no password to store, and the code itself is kept only in scrambled form. You stay signed in on a device for up to 60 days. Your network address and browser are not kept with your sign-in.

To stop people flooding sign-in, we count recent sign-in attempts by network address and, in scrambled form, by email address. Those counts are deleted after a day.

Who sees what

Your friends see which shows you've marked, unless you set your plans to Only me in Settings. Nobody else does. Friends are by request: nothing is shared until someone accepts. There is no public directory of people; someone needs your exact handle or your invite link to find you.

Notifications

Alerts reach you only in the ways you switch on in Settings: the inbox, phone notifications on a device you choose, email, or texts. Phone notifications carry no show details over the network; your device fetches them from us when one arrives. Alert emails need your consent first, and every one has an unsubscribe link.

What we don't do

We don't sell your data, show you third-party ads, or share your plans with anyone but your friends. Tickets are sold by the official seller (Ticketmaster today); when you buy, you're on their site and their privacy policy applies.

Where it's kept

Everything is stored with Cloudflare, which runs the site. Cloudflare may keep and process it on servers outside Canada, where local law applies. Only the person who runs the site can see account details, and only to keep it working or to answer a request from you.

Removing your data

Unmark a show and it's gone from your plans. Remove a friend from Friends. To delete your account and everything attached to it (your plans, friends, follows, notifications and settings), use Delete account at the bottom of Settings. It takes effect at once. Our database keeps a rolling 30-day recovery history in case something breaks; after that, deleted data is gone from it too.

Age

Accounts are for people 13 and older. If you think someone younger has made one, tell us and we'll remove it.

Questions and requests

To ask what we hold about you, to correct it, or anything else about privacy: message us on Instagram at @pulluptoronto (the link is below), and we'll answer within 30 days. If this policy changes, the date here changes with it. Last updated October 25, 2026.