Last updated: 22 April 2026
Festable is a UK music festival directory and discovery engine. Got a question about this policy? Drop us a line at hello@festable.live.
You can browse Festable without signing in and we won't collect anything that identifies you. If you want to save favourites or subscribe to a personalised calendar feed, you'll need to sign in. You can do that with your email address or with your Google account. Once you sign in, we hold a small amount of personal data about you. The details are below.
We also use analytics tools (Google Analytics, Vercel Analytics, and Mixpanel) to understand how people use the site — which pages are visited, how long people stay, and what gets clicked. Mixpanel also includes session recording, which captures on-screen interactions (mouse movements, clicks, scrolls) to help us understand how the product is used. We don't use advertising trackers or share analytics data with anyone else.
Authentication is handled by Supabase, our database and auth provider. You can sign in one of two ways.
Email sign-in.You enter your email address and we send you a 6-digit code to verify it. Typing the code back in signs you in. There's no password to set or remember. The only personal data we collect via this route is your email address. The code email is delivered through Supabase's transactional email service.
Google sign-in. If you sign in with Google, Google shares the following with us:
We don't ask Google for access to your contacts, email, calendar, or any other Google services. Just basic profile info so we know who you are when you come back.
Whichever method you use, we use the data only to: keep you signed in, show your name or email in the interface, link your favourites and calendar token to your account, and contact you at your sign-in email if we ever need to. We don't send marketing email.
Our lawful basis under UK GDPR for processing this data is legitimate interest, specifically running the features you've chosen to use by signing in.
Once you're signed in, here's everything we hold in our database that's linked to your account:
| Where | What | Why |
|---|---|---|
| auth.users | Your email, and (if you signed in with Google) your name, avatar URL, and Google user ID. Managed by Supabase. | Authentication and identifying you across visits |
| profiles | Your user ID and a single flag noting whether you're an admin | Tells the app whether to show the admin area |
| user_favourites | Your user ID plus the festivals you've saved | Your shortlist, synced across devices |
| calendar_tokens | Your user ID and a random token | Lets you subscribe to a personalised calendar feed without exposing your account |
| user_artist_picks | Your user ID and the artists you've picked or ranked in the quiz | Powers artist-based festival matching |
| quiz_runs | One row per quiz submission: your answers, the calculated taste profile, the matches returned, and a hashed IP. Linked to your user ID if you were signed in; anonymous otherwise. | Lets us improve the matching algorithm and debug poor results |
You can subscribe to a personalised iCalendar feed of your saved festivals. When you do, we generate a random opaque token and store it against your user ID. The feed URL contains this token, not your user ID or email — so if you share the URL, you share your shortlist but not your identity.
The feed itself contains only festival names, dates, and links. It does not contain your name or email.
You can invalidate your token at any time by regenerating it from the favourites page, or by asking us to delete your account.
We use cookies and browser storage for essential functionality, quiz progress, and analytics.
| Name | Type | Purpose | Expiry |
|---|---|---|---|
| sb-*-auth-token | Cookie (essential) | Keeps you signed in after you authenticate with email or Google. Set by Supabase. | ~1 week, refreshed on use |
| festable_pending_favourite_slug | Session storage | Temporarily holds a festival you tried to favourite before signing in, so we can save it once you're back | Cleared when you close the tab |
| fst_quiz | Local storage | Saves your quiz answers and match results so you can return to them | Until cleared |
| fst_cookie_consent | Local storage | Remembers that you've dismissed the cookie banner | Until cleared |
| _ga, _ga_* | Cookie (analytics) | Google Analytics — loaded only after you accept analytics cookies | Up to 2 years |
| va (Vercel) | Cookie (analytics) | Vercel Analytics — page view and performance data, loaded only after you accept analytics cookies | Session |
| mp_* | Local storage (analytics) | Mixpanel — page views, interactions, and session recording. Loaded only after you accept analytics cookies. | Until cleared |
You can clear these any time via your browser settings. Signing out will clear the Supabase session cookie.
When you take the festival matching quiz, your answers (favourite festivals, artists, preferences, and location) are sent to our server to calculate your matches. Here's what happens with that data:
quiz_runs table described above), including your answers, the taste profile we calculated, and the matches we returned. We use this to improve the matching algorithm and debug poor results. Submissions are linked to your account if you were signed in. Anonymous submissions are tagged with a one-way hash of your IP address so we can group repeat runs from the same visitor without identifying you. Your answers are also saved locally on your device (in the fst_quiz local storage entry described above) so you can return to your results.We use three analytics tools — Google Analytics (GA4), Vercel Analytics, and Mixpanel — to understand how the site is used. These collect information such as which pages you visit, how long you spend on them, and how you arrived at the site.
Mixpanel also includes session recording: with your consent, it captures on-screen interactions (mouse movements, clicks, scrolls) as a replay. This helps us understand how real people use the product. Recordings don't include passwords or payment details, and we don't attempt to identify individual visitors from them.
All three tools only load after you accept analytics cookies via the cookie banner. If you reject them, no analytics tracking runs. You can change your choice at any time by clearing your browser's local storage for this site, which will show the banner again on your next visit.
Google's privacy policy applies to Google Analytics data. You can also install Google's Analytics opt-out browser add-on to block Google tracking across all sites. Vercel's privacy policy applies to Vercel Analytics data. Mixpanel's privacy policy applies to data processed by Mixpanel.
The third parties that receive or process data on our behalf are:
We don't use advertising trackers or share data with ad networks.
Festival listings link out to organisers and ticketing sites. Once you leave Festable, their privacy policies apply, not ours.
Your account data, favourites, artist picks, and quiz submissions stay until you ask us to delete them. If you haven't signed in for 24 months we may delete inactive accounts to keep things tidy. Anonymous quiz runs (with no user ID) aren't tied to you and are retained in aggregate to help us improve the matching algorithm.
If you've signed in (with email or Google), you have the following rights over the personal data we hold about you:
To exercise any of these rights, email us at hello@festable.live from the address you signed in with. We'll respond within 30 days.
You can also raise a complaint with the UK Information Commissioner's Office at ico.org.uk.
If anything changes, we'll update this page and bump the date at the top.