Privacy
Cookie policy
We use the cookies and browser storage the site needs to work, a few that remember choices you make and, with your consent, the Google Analytics statistics cookies. We don’t follow you across other websites and we don’t show cookie-based ads.
Last updated:
In short
- We ourselves only store what is needed: your session, a security token, your city, “Keep me signed in” and your festival plan.
- No advertising cookies, no social media pixels, no third-party advertising tools. The Google Analytics statistics cookies are only set with your consent.
- We only load the YouTube and Spotify players with your consent, given in the “Privacy settings” window or by clicking the play button and confirming in a short window.
- You can change or withdraw your choice at any time with the “Privacy settings” button at the bottom of every page.
01Who runs this site
eventonight.com is run by:
EVENTONIGHT sp. z o.o.
ul. A. Hryniewickiego 6/221B 81-320 Gdynia Poland Full company detailsHow we handle personal data and what your rights are is explained in our privacy policy.
02What cookies and similar technologies are
Cookies are small text files a website stores in your browser; the browser sends them back on later visits. They let the site know, for example, that you are signed in or which city you picked.
Browser storage (localStorage) works in a similar way: the site keeps data on your device, but the browser never sends it to our server. Everything below applies to both.
03When we ask for consent
Storing information on a user’s device requires consent unless it is strictly necessary to provide a service the user has explicitly asked for (Article 399 of the Polish Electronic Communications Law, Article 5(3) of Directive 2002/58/EC and, in Germany, Section 25(2) no. 2 TDDDG).
Our own storage falls under that exception. The session and the security token are needed for signing in and for forms to work safely. Everything else only remembers choices you make yourself: your city, “Keep me signed in” on the sign-in page, the sets you pick in the festival planner.
That’s why we don’t ask about it. The Google Analytics statistics cookies do need consent: Google’s script only sets them once you allow “Visit statistics”, and we remove them when you withdraw your consent.
The players of other companies need consent too: YouTube videos (Google) and the Spotify player set their own cookies once they load. On your first visit we ask about them and about the statistics in the “Privacy settings” window: “Accept all” allows every player and the statistics, “Necessary only” is just as easy to pick, and after clicking “Customise consent” you decide on each one separately (the switches are off by default). Without consent no player loads by itself: when you click “Play” we ask again, and you decide whether to allow it for good or load it just this once.
We keep your choice only in your browser. You can change it or withdraw your consent at any time with the “Privacy settings” button at the bottom of every page or in “Content from other companies”. Withdrawal works for the future: from then on no player loads without asking, Google Analytics stops counting your visits and we remove its cookies.
- Necessary
- The site doesn’t work, isn’t secure or can’t remember your privacy settings without them.
- Functional
- They remember a choice you make and are only set after it.
- Statistics
- They count visits in Google Analytics. They are only set with your consent and are removed when you withdraw it.
04Cookies on eventonight.com
They are set by eventonight on the eventonight.com domain, except the statistics cookies, which Google Analytics’ script sets with your consent. None of them is used for advertising or to follow you across other websites.
| Name | Purpose | Category | Expires |
|---|---|---|---|
eventonight-session
|
Session: keeps you signed in and carries what you do from one page to the next, such as the message after saving your settings. | Necessary | 2 hours after your last visit |
XSRF-TOKEN
|
Security token: stops other websites from submitting forms in your name (CSRF). | Necessary | 2 hours after your last visit |
eon:privacy
|
Your choice in the “Privacy settings” window: whether you allow YouTube videos, the Spotify player and the Google Analytics statistics, the window’s version and the date of your choice. It saves us asking on every visit. It never reaches our server. | Necessary | until deleted |
remember_web_59ba36addc2b2f9401580f014c7f58ea4e30989d
|
Only set when you tick “Keep me signed in” on the sign-in page, so you stay signed in after closing the browser. | Functional | 400 days |
eon_city
|
The city you picked in the header, on a city page or in your account settings; the “Tonight” events follow it. | Functional | 1 year |
eon_lang
|
The language you chose in the language switch, on the bar suggesting your browser’s language or in your account settings; after that choice the bar no longer appears. | Functional | 1 year |
eon:planner:{id}
|
The sets you picked in the festival planner on the home page, one entry per festival. | Functional | until deleted |
eon:lists
|
Events saved in the browser by an older version of the site. When you sign in, we move them to your account and delete them from the browser. | Functional | until you sign in |
eon-static-{version}
|
Only when the app is installed on this device: its files (layout, script, fonts, icons) and the “You’re offline” page in every language, so it opens without a connection too. The same for everyone, no personal data; an older version’s files stay only as long as saved copies of pages need them. | Necessary | until deleted |
eon-pages
|
Only when the app is installed on this device: copies of the pages you opened recently (at most 50, except your account settings), such as your events, so they work without a connection. They stay on the device, never reach our server and are deleted when you sign out; once your sign-in has expired, they are deleted the next time the app opens, before any of them is shown. | Functional | until deleted |
eon-state
|
Only when the app is installed on this device: whether an account is signed in on it, when that sign-in expires and whether the app may keep copies of pages, so that it deletes them right after you sign out and shows none of them once the sign-in has expired. Never sent to our server. | Necessary | until deleted |
eon:install
|
Set when you close the invitation to install the app (we then do not show it for 30 days) or install the app on this device. Never sent to our server. | Functional | until deleted |
eon:push
|
Notifications on this device: a hash of the address at which the browser accepts notifications (never the address itself), when and in which sign-in we last passed it to your account, and when the question about notifications was closed (we do not ask again for 30 days). Needed for the notifications you turn on. | Functional | until deleted |
_ga
|
Google Analytics: a random ID of your browser that lets the statistics tell returning visits from new ones. Only set with your consent. | Statistics | 1 year |
_ga_{id}
|
Google Analytics: the number and time of the current visit in the statistics. Only set with your consent. | Statistics | 1 year |
05Storage in the panels
The partner panel (/partner) and the admin panel (/admin) use the same session, security token and “Keep me signed in” cookies as the site. On top of that, they keep layout settings in browser storage:
| Name | Purpose | Category | Expires |
|---|---|---|---|
theme
|
The panel theme chosen in the user menu: light, dark or system. | Functional | until deleted |
isOpen
|
Whether the panel’s side menu is open on a phone. | Functional | until deleted |
isOpenDesktop
|
Whether the panel’s side menu is expanded on a computer. | Functional | until deleted |
collapsedGroups
|
Which side menu groups are collapsed. | Functional | until deleted |
horizonColorScheme
|
Colour scheme of the Horizon queue dashboard. | Functional | until deleted |
horizonAutoLoadsNewEntries
|
Whether the Horizon queue dashboard loads new entries by itself. | Functional | until deleted |
06Content from other companies
Some parts of the site come from other companies’ servers. We don’t store anything for them, but the provider’s server receives your IP address and basic browser details, as with any connection on the internet.
-
YouTube player
With consentVideos first appear as a thumbnail from our own server or as a poster. The player loads in privacy-enhanced mode from www.youtube-nocookie.com, www.youtube.com only with your consent: when you allow YouTube videos in “Privacy settings” (it then loads at once on video and playlist pages but does not start by itself), or when you click play and confirm. From the moment it loads, YouTube (Google) may store cookies and browser storage in your browser and process your IP address under its own rules.
- Provider
- Google Ireland Limited (YouTube)
- Server
www.youtube-nocookie.com,www.youtube.com- Where
- Website
-
Spotify player
With consentOn artist pages we first show a placeholder from our own server. The player loads from open.spotify.com only with your consent: when you allow the Spotify player in “Privacy settings” (it then loads at once but does not start by itself), or when you click “Listen here” and confirm. From the moment it loads, Spotify may store cookies and data in your browser’s storage and process your IP address under its own rules.
- Provider
- Spotify AB
- Server
open.spotify.com- Where
- Website
-
Google Analytics
With consentVisit statistics, only with your consent: only once you allow them in “Privacy settings” does your browser fetch the script from www.googletagmanager.com, region1.google-analytics.com, www.google-analytics.com and send Google information about the pages you open, your device and your browser. The script sets the _ga and _ga_… cookies described above, and Google Analytics does not store your IP address. Google signals and ad personalisation are off, and Google processes the data on our behalf.
- Provider
- Google Ireland Limited (Google Analytics)
- Server
www.googletagmanager.com,region1.google-analytics.com,www.google-analytics.com- Where
- Website
-
Artist photos from Wikimedia Commons
On displayYour browser loads artist photos from Wikimedia Commons directly from upload.wikimedia.org, thumb.wikimedia.org (Wikimedia Foundation). We request them without cookies, so those servers can neither read nor store anything in your browser, but they see your IP address and which photo is loaded.
- Provider
- Wikimedia Foundation
- Server
upload.wikimedia.org,thumb.wikimedia.org- Where
- Website, partner panel, admin panel
-
Artist photos from Ticketmaster
On displaySome artist photos come from the Ticketmaster event import. Your browser loads them from s1.ticketm.net, also without cookies. That server sees your IP address and which photo is loaded.
- Provider
- Ticketmaster (Live Nation Entertainment)
- Server
s1.ticketm.net- Where
- Website, partner panel, admin panel
-
Event images from KupBilecik
On displaySome event images come from the KupBilecik partner programme feed. Your browser loads them from assets.kupbilecik.pl, also without cookies. That server sees your IP address and which image is loaded.
- Provider
- SZTOLDO.PL sp. z o.o. sp.k. (KupBilecik)
- Server
assets.kupbilecik.pl- Where
- Website, partner panel, admin panel
-
Video thumbnails
On displayThe video list in the admin panel shows thumbnails from i.ytimg.com (YouTube). Loading them lets YouTube see the IP address of the staff member; we store nothing for this.
- Provider
- Google Ireland Limited (YouTube)
- Server
i.ytimg.com- Where
- Admin panel
Videos from YouTube
We show videos using the YouTube API Services. By watching them you agree to the YouTube Terms of Service.
The player belongs to YouTube (Google): Google processes the data it collects once started under the Google Privacy Policy.
From the YouTube API we take only public information about videos and channels, such as the title, publication date, length, availability, thumbnail, view count, audio language and regional restrictions, and the names and IDs of channels. We refresh it at least every 30 days or delete it, and we never show view counts. We copy the thumbnails of published videos unchanged to our own server and show them from there, so displaying them does not connect your browser to YouTube. We refresh or delete these copies within 30 days too. To work out which channels and videos belong to the artists in our catalogue and which videos to show, we send some of this data to an AI model from Anthropic (USA): video titles, the start of their descriptions and their tags, and for channels the name, handle, the start of the description, the number of subscribers and videos and the titles of the latest videos, together with the names and aliases of the artists in our catalogue. We remove e-mail addresses and phone numbers before anything is sent. The model gets no data about the people who visit the site, and we take no data about you or your YouTube account.
We only load the YouTube player with your consent, given in the “Privacy settings” window or by clicking “Play” and confirming in a short window. We keep your choice only in your browser’s storage. You can change it or withdraw your consent at any time with the button below or “Privacy settings” at the bottom of every page; withdrawal works for the future.
Spotify player
We only load the Spotify player on artist pages with your consent, given in the “Privacy settings” window or by clicking “Listen here” and confirming in a short window. We keep your choice only in your browser’s storage. You can change it or withdraw your consent at any time with the button below or “Privacy settings” at the bottom of every page; withdrawal works for the future.
“Buy tickets” buttons take you to ticket sellers, sometimes through an affiliate network. Their own cookie rules apply on their websites. We only add a random click ID to the link, without any personal data, so the commission can be settled.
07Statistics without cookies
We count views of event, artist, venue and video pages, plays of videos in our players and clicks on “Buy tickets” buttons. That’s how we show what is popular and how partners see the interest in their events. These counts use no cookies and no third-party tools, and they work even when you don’t allow Google Analytics.
So that one person is not counted several times, the server builds a one-day hash of the IP address, the browser and a random value that changes every day. The hashes and that value are deleted within 24 hours at the latest; only daily totals stay in the database. Numbers below 5 are shown as “<5”.
We store
- daily numbers of views, clicks and video plays per page, offer or video
- the country the connection came from and where the click was made (e.g. the event page)
- a random click ID for the affiliate network, for 30 days
We don’t store
- cookies or identifiers in your browser
- your IP address or your account ID
- anyone’s browsing history
08How to manage cookies
You can review and delete cookies and site data at any time in your browser settings. You can also block them for eventonight.com or for all websites.
Without the necessary cookies you can’t sign in, and forms such as sign-in or price alerts will fail with a session expired error. If you delete the city cookie, the site goes back to the default city; clearing browser storage removes the festival plan saved on that device.
Browser guides
09Changes to this policy
We update this policy whenever we change the cookies and storage we use. The date of the last change is at the top of the page.
10Contact
Questions about cookies and privacy? Write to: [email protected]
