Privacy Policy

1. Scope and Acceptance

This Privacy Policy applies to all visitors and registered users of the GigMoments website, mobile web experience, and iOS application, as well as to information submitted through account deletion requests, feedback forms, and related support channels.

If you do not agree with this policy, please do not use our services. We may update this policy from time to time. When we make material changes, we will revise the effective date at the top of this page. Your continued use of GigMoments after an update means you accept the revised policy.

2. Data Controller and Contact

The operator responsible for processing your personal information in connection with GigMoments is GigMoments.

For privacy-related questions, requests, or complaints, please contact us at [email protected]. We aim to respond within a reasonable time and, where applicable, within the timelines described in applicable law.

3. Information You Provide — Account and Profile

When you register, sign in, or manage your account, we may collect and store information such as:

• Display name or nickname
• Username
• Email address
• Profile avatar
• Bio or self-description
• Time zone preference
• Public profile visibility setting (whether your profile can be viewed by others)
• Authentication provider information (for example, Clerk, Google, GigMoments Accounts, or iOS app sync)
• Account creation and update timestamps

4. Information You Provide — Content and Interactions

When you use GigMoments, you may submit or generate content and activity data, including:

• Photos and videos uploaded to concerts or your profile, including captions, file metadata, and view counts
• Discussion topics, replies, and comments in community forums
• Concert information you create or edit, including drafts
• Follows, attendance marks, ratings, likes, favorites, and other interaction records
• Feedback submissions, including subject, description, page URL, optional screenshots, and selected feedback type

If you embed or link to third-party content such as YouTube videos, that content is served by the third party under its own terms and privacy practices.

5. Information Collected Automatically

When you access GigMoments, we automatically collect certain technical and usage information, including:

• Session identifiers and authentication state stored in cookies or server-side session storage
• Browser type, device information, and user agent string
• Approximate location derived from IP address (such as country, region, or city) for features like nearby concerts and localized display
• Hashed identifiers used for analytics and abuse prevention (for example, hashed IP, user agent, or visitor identifiers for performer page visits and search analytics)
• Media and page view counts
• Language and locale preferences
• Referring pages and on-site navigation patterns

We use this information to operate, secure, and improve the service, not to identify you personally unless combined with account information.

6. Authentication and Third-Party Sign-In

GigMoments supports multiple sign-in methods. Depending on the method you choose, we may receive information from the authentication provider, such as your name, email address, profile image, and a unique provider identifier.

Supported methods include Clerk, Google OAuth, GigMoments Accounts (our external unified account system), and iOS app account synchronization. Each provider processes data under its own privacy policy. We only use the information necessary to create and maintain your GigMoments account.

If your account is linked to GigMoments Accounts, your email may be synchronized again when you sign in through that system.

7. How We Use Your Information

We use the information described above to:

• Provide, maintain, and personalize the GigMoments concert community experience
• Create and manage your account, including profile and privacy settings
• Display, store, and deliver user-generated photos, videos, discussions, and concert data
• Enable social features such as follows, likes, attendance marks, and public profiles
• Respond to feedback, support requests, and account deletion applications
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues
• Analyze usage trends to improve performance, features, and content relevance
• Send operational notices related to your account or the service
• Comply with legal obligations and enforce our terms and community standards

8. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how our services are used.

• Session cookies: Laravel session cookies used for authentication and site functionality. Session lifetime may be up to 365 days depending on configuration.
• Preference cookies: such as is_first_run, used to control first-visit welcome experiences.
• Analytics: Google Analytics (measurement ID G-9HNJ88X3FP) to collect aggregated usage statistics. Google may set its own cookies and process data according to Google's policies.
• Authentication cookies: cookies set by Clerk or related sign-in flows when you authenticate through supported providers.

You can control cookies through your browser settings. Disabling certain cookies may limit your ability to sign in or use some features.

9. Third-Party Services and Processors

We rely on trusted third-party services to operate GigMoments. These providers may process personal information on our behalf or when you interact with embedded content:

• Clerk — identity and authentication services
• Google — OAuth sign-in and Google Analytics
• GigMoments Accounts — external unified account system
• Amazon Web Services (AWS) S3 — media storage, served via our CDN (images.animesdata.com)
• YouTube — embedded video playback (privacy-enhanced mode where applicable)

Each third party is responsible for its own data practices. We recommend reviewing their privacy policies for more information.

10. How We Share Information

We do not sell your personal information.

We may share information only in the following circumstances:

• With service providers who help us operate GigMoments (hosting, storage, authentication, analytics), subject to contractual confidentiality and security obligations
• When you choose to make content or your profile public on the platform
• When required by law, regulation, legal process, or governmental request
• To protect the rights, property, or safety of GigMoments, our users, or the public
• In connection with a merger, acquisition, or sale of assets, with notice where required by law
• With your consent or at your direction

11. Data Retention

We retain personal information for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.

When you submit an account deletion request, we review it manually and process approved requests within 7 business days. Deletion is not immediate upon submission. You may specify the scope of data to delete, including profile information, uploads, interactions, and content you created.

Some information may be retained in backups, logs, or anonymized form for a limited period after deletion where necessary for security, fraud prevention, or legal compliance.

12. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to withdraw consent where processing is consent-based.

You can manage many settings directly in your account, including updating your profile, email, avatar, bio, time zone, and whether your profile is publicly visible.

To request account deletion, visit our Account Deletion Request page. You can submit a request whether or not you are currently signed in, and select which categories of data you want removed.

• Profile — account details such as nickname, avatar, and bio
• Uploads — photos, videos, and related media
• Interactions — follows, likes, attendance marks, ratings, and similar activity
• Created content — discussions, comments, concerts you created, and drafts

To exercise other privacy rights, contact [email protected]. We may need to verify your identity before processing certain requests.

13. Children's Privacy

GigMoments is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact [email protected] and we will take appropriate steps to delete it.

14. International Data Transfers

GigMoments is a global online community. Your information may be processed and stored in countries other than your own, including where our service providers operate.

When we transfer personal information internationally, we take reasonable steps to ensure appropriate safeguards are in place, such as contractual protections with processors and security measures described in this policy.

15. Security

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include access controls, secure storage for media assets, and hashed identifiers where appropriate.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to maintain safeguards consistent with the nature of the data we process.

16. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, legal requirements, or service features. When we update the policy, we will change the effective date at the top of this page.

We encourage you to review this page periodically. Material changes may also be communicated through the website or other appropriate channels where required.

17. Contact Us

If you have questions about this Privacy Policy or our data practices, please email [email protected].

We will review and respond to privacy inquiries within a reasonable timeframe. Account deletion requests are processed within 7 business days after approval, as described above.