Privacy Policy
Last updated 4 October 2026
The short version: Gig Rewind keeps the gigs, photos and notes you add so it can show them back to you, and to anyone you choose to share them with. There are no ads, no tracking and no analytics, and your data is never sold.
Who runs Gig Rewind
Gig Rewind (gigrewind.com) is run by Dan Edwards, an individual based in the United Kingdom. I'm responsible for your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018). For anything about your data, email dan@danedwards.me.
What I collect
- Your account: your email address, which you use to log in, your first name and, if you add it, your last name. Your name labels your library, like “Dan’s Gig Rewind”.
- Your library: the gigs you add (artist, venue, city, country, date, tour, support act and setlist), your notes, which ticket design and cover you picked, and whether your notes are private.
- Your photos: up to 4 per gig. Your browser shrinks each photo before it's uploaded, and that also strips hidden details such as the location it was taken and the camera used. The original file is never stored.
- Your sharing settings: whether your library or a gig is shared, and the links that go with them.
- That you accepted the Terms of Use: the date, and which version.
- Technical information: the cookies that keep you logged in, and the short-lived logs the hosting provider keeps when a page is requested, which include your IP address and browser type.
Please don't put sensitive information about yourself or other people in your notes.
Why I use it
- To run the service you asked for: logging you in, storing your library and showing it to you and to anyone you share it with. The legal basis is the contract between us, set out in the Terms of Use.
- To keep Gig Rewind secure and working: spotting abuse, fixing problems and responding to reports. The legal basis is my legitimate interest in running a safe service.
- To meet legal obligations, for example if the law requires me to keep or share something.
The only emails you'll get are login links and, rarely, important messages about the service. No marketing.
Who helps run it
These companies store or handle data for me, only to provide Gig Rewind:
- Supabase: the database, logins and photo storage. Your library and photos are stored on Amazon Web Services servers in Ireland (EU).
- Vercel: hosts the website and keeps short request logs.
- Resend: sends the login emails, so it handles your email address.
Vercel and Resend are based in the United States, so some data may be processed there. They protect it with the safeguards UK law requires for transfers outside the UK, set out in their data processing terms.
Two outside services are used when you add a gig or look at covers:
- setlist.fm: when you search for a gig, the artist, year and city you type are sent from Gig Rewind's server to setlist.fm. Nothing that identifies you is sent with them.
- Deezer: artist photos on covers load directly from Deezer's servers, so Deezer sees your IP address and browser in the same way any website does when it shows you an image.
Sharing
Your library is private unless you turn sharing on. When a library or gig is shared, anyone with the link can see those gigs, tickets and photos, your first name, and any notes you've chosen to show. Shared pages are kept out of search engines, but links can be passed on, so share them with care. Turning sharing off makes the link stop working straight away.
Cookies and browser storage
Gig Rewind uses cookies only to keep you logged in. It also remembers two small things in your browser: that you've seen the “turn it sideways” tip, and that the opening animation has played. There are no advertising or analytics cookies, which is why there's no cookie banner.
How long it's kept
Your library stays for as long as you have an account. You can delete a photo or gig at any time, and deleting your account permanently removes your library, photos and share links straight away. Copies in my providers' backups and logs are overwritten after a short time.
Your rights
You can ask to see the personal data I hold about you, have it corrected or deleted, get a copy to take elsewhere, or object to or limit how it's used. You can do most of this yourself in the app, including deleting your account (the Account button on a computer, or More → Account on a phone). For anything else, email dan@danedwards.me and I'll reply within a month.
If you're unhappy with how your data is handled, please tell me first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Children
Gig Rewind is for people aged 13 and over.
Changes
If this policy changes, I'll update it here and change the date at the top. If the changes are significant, I'll tell you in the app or by email.