This Privacy Policy explains what information Setlag ("Setlag," "we," "us") collects when you use setlag.demtschenko.com and related apps (the "Service"), why we collect it, who we share it with, and the choices you have. Setlag is operated by Daniel Demtschenko. If you have questions, contact daniel@demtschenko.com.
Account information. Email address, password (stored only as a salted PBKDF2 hash — we never store or can see your actual password), name, and optionally a phone number and home city (with its approximate coordinates).
Trip information. Destination cities and travel dates you add, used to match you with events happening while you're there.
Artist & event data. Artists you follow, and events you mark as "attending" or "interested." Event listings themselves are fetched from third-party event providers (see below).
Friend data. Friend requests you send or receive, and accepted friend connections. Your phone number is shared with a friend only after you've both accepted the connection; email addresses are never revealed through search or friend requests unless you search for someone using their exact email address.
Communications. Feedback or bug reports you submit through the app, which are emailed to the developer along with your name/email so we can follow up.
Technical & diagnostic data. Basic event logs (e.g. sign-ups, errors, feature usage) recorded via Cloudflare Analytics Engine. These logs are structured to avoid storing full personal identifiers — for example, sign-up logs record only your email's domain (e.g. "gmail.com"), not the full address. Your IP address is briefly used at the network edge for rate-limiting (e.g. login attempts, sign-ups) and is not stored in our database.
We do not sell your personal information, and we do not use your data for third-party advertising.
We use the following service providers to operate Setlag. Each only receives the minimum data needed to perform its function:
We may also disclose information if required by law, or to protect the rights, safety, or property of Setlag, our users, or others.
Setlag uses a single, essential session cookie (HttpOnly, Secure, SameSite=Lax) to keep you signed in. We do not use third-party advertising or tracking cookies.
We retain your account data for as long as your account exists. Cached event data expires automatically (typically within 24 hours to 7 days). If you delete your account (see below), your account record, trips, followed artists, attending list, and friend connections are deleted immediately and permanently.
Access & export. From Profile → Legal & your data → "Download my data," you can download a complete copy of the data associated with your account at any time.
Correction. You can update your name, email, phone, and home city directly from your Profile at any time.
Deletion. From Profile → Danger zone → "Delete account," you can permanently and irreversibly delete your account and all associated data, after confirming your password.
If you're in the EU/UK, California, or another jurisdiction with statutory privacy rights (access, correction, deletion, portability, or objection to processing), the tools above are how we fulfill those rights in practice — you don't need to email us to exercise them, though you're welcome to.
Setlag is not directed at children and is not intended for use by anyone under 16. We do not knowingly collect information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
Setlag is operated from the United States, and your information is processed and stored on Cloudflare's global network. By using the Service, you understand your information may be transferred to and processed in countries other than your own.
We use industry-standard measures to protect your data, including salted PBKDF2 password hashing, HttpOnly/Secure session cookies, and rate limiting on sensitive endpoints. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.
We may update this policy from time to time. Material changes will be reflected by updating the effective date above. Continued use of the Service after a change means you accept the updated policy.
Questions or requests about this policy or your data: daniel@demtschenko.com.