EncoreTrail is a free guide to live events. You can use it without an account, and we never ask for your name, email address or payment details. This policy explains the little data that is processed when you visit, why, and the rights you have.
Who is responsible
The controller for this website is the operator of EncoreTrail. For any privacy question or request, email hello@encoretrail.com.
Server and security logs
When you load a page, our server and our content-delivery and security provider, Cloudflare, process technical data: IP address, date and time, the page requested, referring page, browser type and response status. This is necessary to deliver the site, protect it against abuse and fix errors (legitimate interests, Art. 6(1)(f) GDPR). Our server logs are deleted after 14 days.
Approximate location from your IP address
To suggest events in your area, your IP address is looked up in a geolocation database stored on our own server to find the nearest city with events. The lookup happens in memory for that single request; the result is not stored, not combined with other data and not shared (legitimate interests, Art. 6(1)(f) GDPR). The suggestion is only a starting point — you can always choose any city yourself.
Precise location (“near me”)
If you press “Use my location”, your browser asks for permission to share your position. We round it to about 1 km, use it once to find nearby events and do not store it (consent, Art. 6(1)(a) GDPR — you can refuse or revoke it in your browser at any time).
Ticket link clicks
When you follow a link to a ticket seller we record the event, the time, the page you came from and the country (derived from the request by Cloudflare). We do not record your IP address or any identifier, so these records are not linked to you. Once you are on the seller's site, its own privacy policy applies.
Cookies and local storage
We do not use advertising cookies. Google Analytics and Yandex Metrica set analytics cookies from your first page view; you can turn them off at any time with “Turn off analytics” in the notice or via “Cookie settings” at the bottom of every page. Your browser's local storage remembers your analytics choice and whether you dismissed the language suggestion. Cloudflare may set strictly necessary security cookies. Details are in our cookie policy.
Analytics
We use Google Analytics 4, provided by Google Ireland Limited and Google LLC, to measure which pages are useful and to improve the site. It runs from your first page view and sets the cookies _ga and _ga_<ID> for up to 14 months; Google Analytics 4 does not store full IP addresses. We use no advertising features and no advertising cookies. Legal basis: our legitimate interest in audience measurement, Art. 6(1)(f) GDPR. You have the right to object at any time (Art. 21 GDPR): click “Turn off analytics” in the notice or use “Cookie settings” at the bottom of every page. Google Analytics measurement then stops (Google Consent Mode is set to “denied”).
We also use Yandex Metrica, provided by YANDEX LLC, Moscow, Russia, to count visits and see how pages are used (click map, tracking of link and outbound clicks, accurate bounce rate). Session recording (Webvisor) is switched off. Yandex Metrica runs from your first page view. It sets the cookies _ym_uid and _ym_d (1 year each) and _ym_isad (2 days) and stores some data in your browser’s local storage. Legal basis: our legitimate interest in audience measurement, Art. 6(1)(f) GDPR. You can object at any time (Art. 21 GDPR) by clicking “Turn off analytics” in the notice or via “Cookie settings” at the bottom of every page; Yandex Metrica is then no longer loaded on later pages and visits.
Service providers and transfers
Cloudflare, Inc. delivers and protects the site and processes the technical data above on our behalf; it is certified under the EU–U.S. Data Privacy Framework and bound by Standard Contractual Clauses. Google provides Google Analytics on our behalf under the same safeguards. Our web server is located in Brazil; where personal data leaves the EEA or UK, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses. We do not sell personal data.
Yandex Metrica is an exception: the data it collects is processed by YANDEX LLC in Russia. The European Commission has not adopted an adequacy decision for Russia, so the level of data protection there is not recognised as equivalent to that in the EU. Please be aware of the risks: Russian authorities may be able to access the data, and the legal remedies available in the EU may be limited or not available to you there. If you do not want this, turn off analytics in the notice or at any time via “Cookie settings”; Yandex Metrica is then no longer loaded.
How long data is kept
- Server logs: 14 days.
- Approximate and precise location: not stored.
- Analytics data: 14 months.
- Ticket link click records: kept in aggregate for reporting; they contain no personal identifiers.
- Emails you send us: as long as needed to answer you, then deleted within 12 months.
Your rights
You have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier processing. To exercise them, email hello@encoretrail.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.
Children
EncoreTrail is not directed at children under 16, and we do not knowingly process their personal data.
Changes
We update this policy when our services or the law change. The date of the latest review is shown below.
Last reviewed: 2026-10