Privacy Policy

This Privacy Policy explains how GeoStub may collect, use, store, and share information when people use the event discovery service, public pages, outbound ticket links, sponsored event features, and admin tools.

TODO: Add GeoStub's legal entity name, controller details, registered address, company number if applicable, and data protection contact before public launch.

GeoStub may collect information you provide, information generated when you use event discovery features, technical information from your browser, consent choices, and operational admin information.

If GeoStub introduces accounts, forms, event submissions, support requests, newsletter signups, or admin workflows, we may collect the information submitted in those features. At present, the public discovery experience is designed to work without requiring an account.

When permitted by consent or where strictly necessary for security and service operation, GeoStub may collect page path, referrer, browser or user agent, time of request, event identifiers, coarse interaction data, and technical logs. Lightweight server-side operational logs may be used to keep the service secure, diagnose errors, count outbound redirects, and prevent abuse without creating behavioral profiles.

Analytics events are non-essential and only run when analytics consent is given. GeoStub analytics may include app loads, search terms, result counts, filter choices, event detail opens, shares, city overview opens, map-area searches, near-me use status, and admin analytics summaries. Analytics should not be used to store payment details or sensitive personal data.

GeoStub redirects users to third-party ticket providers and may receive commissions from ticketing partners when users click outbound ticket links or complete purchases through affiliate relationships. Basic affiliate redirects work without marketing cookies, fingerprinting, or cross-site profiling. GeoStub may add affiliate or UTM parameters to outbound URLs and record minimal server-side operational data such as timestamp, event ID, provider/source, and destination host.

The Near Me feature uses browser geolocation only after you request it and approve the browser prompt. GeoStub uses approximate latitude and longitude in the browser to sort or filter nearby events. Near-me analytics only run when analytics consent is given and record usage status and radius, not precise coordinates.

GeoStub uses a first-party cookie to remember cookie choices. Optional analytics, advertising, and preference storage is disabled unless the relevant consent category is enabled. Basic affiliate ticket links use non-cookie redirects and remain available before consent. See the Cookie Policy for categories, purposes, and current placeholders.

GeoStub uses information to provide event discovery, load event data, redirect users to ticket providers, prevent misuse, understand feature performance where consent allows, manage sponsored event placements, improve search and discovery quality, maintain admin dashboards, and comply with legal obligations.

Depending on the context, GeoStub may rely on consent for optional cookies, analytics, advertising tracking, and preference storage; legitimate interests for security, service diagnostics, affiliate redirect handling, lightweight operational click counting, abuse prevention, and basic business operations; contract or pre-contract steps if accounts or paid services are introduced; and legal obligation where law requires processing.

GeoStub may share information with hosting providers, database providers, analytics infrastructure, security and operations providers, professional advisers, law enforcement where required, and third-party ticket providers when users choose to leave GeoStub through outbound links.

Ticket providers operate their own services and may collect data under their own privacy notices and cookie policies. GeoStub does not control their checkout, payments, account systems, or marketing preferences.

TODO: Confirm production retention periods. Consent cookies are currently set for up to 180 days. Analytics and outbound click records should be retained only as long as needed for reporting, security, accounting, partner reconciliation, or legal requirements.

TODO: Confirm hosting, database, analytics, admin, and support vendor locations. If data is transferred outside the UK, EEA, or Switzerland, GeoStub should document the transfer mechanism, such as adequacy regulations or standard contractual clauses where appropriate.

Depending on where you live and the processing involved, you may have rights to access, correct, delete, restrict, object to processing, receive a portable copy of data, withdraw consent, and complain to a supervisory authority. TODO: Add the correct request channel and response workflow after legal review.

You can withdraw or change cookie consent at any time by using the Cookie settings link in the footer or on legal pages. Withdrawing optional consent stops future optional tracking from that browser. You can also clear browser cookies and storage.

GeoStub uses technical and organizational measures designed to protect the service, including restricted admin access and server-side controls. No online service can guarantee perfect security.

GeoStub is not intended for children under the age required by applicable law to use online services without parental consent. TODO: Confirm age thresholds and youth-audience positioning before launch.

GeoStub may update this Privacy Policy as the service, vendors, legal requirements, or cookie practices change. Material changes should be reflected with a new last updated date and, where appropriate, renewed consent.

TODO: Add privacy contact email, postal address, company details, and data protection representative or officer details if required.

Last updated: May 11, 2026.