Privacy Policy

The short version

OnTonite is an event-discovery app. We collect as little as we can to run it. We don't sell your data, and we don't run ads or tracking cookies. This page explains what we do collect and why.

What we collect

• Account: your email address. Accounts use magic links, so there are no passwords. That's it — no name, phone, or address required.
• Artist claims: if you claim an artist profile, we collect the contact email you give us and the website or social links you provide as proof you own or represent the artist.
• Feedback: if you send feedback, we store the category, your message, any contact info you include, the page you were on (page_url), your browser's user agent, and the referrer. This helps us reproduce what you saw.
• Venue suggestions: if you suggest a venue, we store the venue details you submit (built from Google Places type-ahead) so we can review and add it.
• Server logs: our database and hosting generate standard technical logs (requests, timestamps, errors). We use them to keep the service running and secure.

Device storage

We keep things on your device minimal and functional:

• ont_theme (cookie) — remembers your light/dark theme choice.
• Supabase PKCE auth cookies — keep you signed in.
• Dashboard session cookie — signs venue staff into manage.ontonite.app.
• ontonite-theme-v2 (localStorage) — theme preference on this device.
• ontonite-recent-searches (localStorage) — your recent searches on this device, so we can show them again.

That's the whole list. No analytics, advertising, or tracking cookies exist today. If that ever changes, we'll show you a notice and update this page first.

Why we use it

To create your account, keep you signed in, remember your preferences, answer feedback, review venue suggestions and artist claims, and keep the service working and secure. We don't use your data for advertising, and we don't sell it.

Where your data lives

We self-host our Supabase Postgres database at db.ontonite.app on a Netcup VPS in the European Union, operated by us. Your account and app data stay on that server. If you use the venue dashboard at manage.ontonite.app, its session data lives there too.

How long we keep it

• Artist claims that are rejected are deleted after 12 months.
• Feedback is kept for 24 months.
• Venue submissions are kept until processed, or 12 months at most.
• Account data is kept until you ask us to delete your account.

Your rights

You can ask to see your data, correct it, or delete it. Email us at mmilam360@gmail.com and we'll take care of it. You can also clear device storage yourself through your browser settings.

Children

OnTonite is not intended for children under 13, and we don't knowingly collect their information. If you believe a child under 13 gave us data, email us and we'll delete it.

Service providers

• Supabase (self-hosted) — the open-source platform running our database and email magic-link sign-in, hosted by us.
• Netcup — the hosting provider for the VPS our database runs on.
• Stripe — will process payments for paid artist subscriptions when billing launches. Stripe sees your payment details; we never see or store card numbers.

Contact

OnTonite is operated by Michael Milam, Columbus, Ohio. For any privacy question or request, email mmilam360@gmail.com.