EU data policy
Last updated 3 August 2026
Festival Planner has no accounts, no analytics, no advertising and no tracking. It collects no personal data about you at all. This page explains what that means in practice and what little data still moves when you load a page.
Who is responsible
Festival Planner is a personal, non-commercial project run from Helsinki. For anything on this page, write to festarri.fi@gmail.com.
What is stored on your device
When you add a set to your plan on a planner page, that choice is written to your own browser — as a cookie where the site is hosted, or as a localStorage entry when the page is opened from a file. It holds nothing but the identifiers of the sets you picked.
- It is never transmitted anywhere. There is no server to send it to.
- It is not readable by any other site.
- It carries no identifier for you, your device or your browser.
- Clearing your browser's site data for this domain removes it completely.
Under the ePrivacy rules this is storage strictly necessary for a feature you asked for. It is not used for analytics or advertising, which is why the notice on the planner pages explains what it does rather than asking you to consent to tracking.
What leaves your browser
Every page on this site is a single self-contained file. Fonts, maps, artwork and code are embedded in it, so once a page has loaded it makes no further network requests — no font CDN, no image host, no analytics endpoint. You can disconnect and it keeps working.
Two things are unavoidable:
- Hosting. The site is served by GitHub Pages. To deliver a page, GitHub necessarily processes your IP address and request metadata, and may retain it briefly for security and abuse prevention. This is GitHub's processing, not ours, and is covered by the GitHub Privacy Statement. We receive none of it and have no access to any log.
- Links you choose to follow. Ticket sellers, festival sites, streaming services and map data sources are separate companies with their own policies. Following a link there is a visit to them, and nothing about your plan travels with you.
Location
The place selector in the header reads Finland by default and does nothing on its own. If you press Use my location, your browser asks your permission and, if you grant it, hands the page a coordinate.
- The coordinate is used once, immediately, to work out which of the places on that short list is nearest.
- It is not stored. Only the name of the place you ended up on is kept, in your own browser.
- It is not transmitted. There is no server to send it to, and the page makes no network requests.
- Declining the permission prompt costs you nothing — pick a place from the list instead.
Information about performing artists
The planner pages name the artists who are booked to play, and for some of them show a portrait, a short description and links to their own streaming or social pages. Where an artist is an individual rather than a band or a company, that counts as personal data under the GDPR, so it is worth being explicit about how it is handled.
- What is shown. Stage name, set time and stage, a genre tag, a publicity photograph, a short professional blurb and links the artist already publishes. Nothing else — no contact details, no private-life information, and no special category data.
- Where it comes from. Each festival's own public programme page for that act, plus the public MusicBrainz and Deezer catalogues. All of it is material published deliberately, by the artist or their organiser, to promote a publicly advertised performance.
- Legal basis. Legitimate interests, Article 6(1)(f) — describing a public event accurately to people deciding whether to attend. The processing is limited to professional information the artist has already made public in that professional capacity, which is why it does not override their interests or rights.
- What is not done. No profiles are built, nothing is combined with data about you, nothing is used for advertising or sold, and none of it is transferred outside the page you are reading.
If you are a performing artist and you would like your photograph, description or listing removed or changed, write to festarri.fi@gmail.com. This is your Article 21 right to object, and it is honoured on request without you having to give reasons — acknowledged within 3 days and actioned within 7. Your set time may stay listed as a plain fact about the event, unless you tell us you would rather it did not appear at all.
Your rights
The GDPR gives you the right to access, rectify, erase, restrict and port your personal data, to object to processing, and to complain to a supervisory authority — in Finland, the Office of the Data Protection Ombudsman.
As a visitor, there is nothing here to exercise those rights against. We hold no personal data about you, so there is no record to hand over, correct or delete. The only data connected to you sits in your own browser, under your own control, and you can erase it yourself at any time. Performing artists named on the planner pages are the one exception, and the section above sets out how to exercise these rights over that material.
Children
The site is open to anyone and collects nothing from anyone, so it needs no age gate and holds no children's data.
Changes
If this ever stops being accurate — if anything is added that does collect data — this page will be updated before that change ships, and the date at the top will say so.