Skip to main content
GigWhere
ConcertsVenuesNewsletter

Discover

  • Concerts
  • Venues
  • Browse Countries
  • Browse Artists
  • Browse Cities
  • Newsletter
  • Submit Event

Popular Cities

  • London
  • Paris
  • Manchester
  • Berlin
  • Hamburg
  • Glasgow
  • Birmingham
  • Krakow

Genres

  • Rock
  • Jazz
  • Electronic
  • Pop
  • Metal
  • Folk
  • Classical
  • Hip-Hop

Company

  • About
  • Privacy
  • Terms
  • API
  • Contact

GigWhere only links to official tickets from venues and trusted sellers. No scalpers, no hidden fees.

© 2026 GigWhere
Featured on LaunchBuff

Privacy Policy

Last updated: July 2026

Data controller

This service is operated by GigWhere (hello@gigwhere.com). For privacy inquiries, contact privacy@gigwhere.com.

Our privacy promise

Privacy is a core value at GigWhere, not a compliance checkbox. We collect the minimum data needed to run the service, we never sell or share your data with advertisers, and we do not track you across the web. The only personal data we hold is what you give us when subscribing to concert alerts.

What we collect

We do not collect personal data for advertising or analytics purposes. When you subscribe to our newsletter, we store:

  • Email address: to deliver your weekly picks.
  • City preferences: the cities you chose to follow (e.g. Stockholm, Oslo).
  • Venue preferences: specific venues you chose to follow (optional, e.g. Trädgårn, Rockefeller).
  • Genre preferences: music genres you chose to filter by (optional).
  • Subscription source: which page you subscribed from (e.g. “venue page”). Used only to improve the service. Processed under the same consent basis and deleted on the same schedule as all other newsletter data.
  • Consent timestamp: when you gave consent, as required by GDPR.

We do not track whether you open our emails, click links inside them, or how long you read them. No email engagement data is collected.

You can unsubscribe at any time via the link in each email, or request a full export or deletion of your data via the links in each email.

Legal basis for processing

We process your personal data (email address, city preferences, venue preferences, genre preferences, and subscription source) on the basis of your explicit consent, in accordance with GDPR Article 6(1)(a). You provide this consent when you check the consent checkbox on the subscription form and confirm your email via the double opt-in confirmation link. You may withdraw your consent at any time by unsubscribing via the link in any newsletter email.

Data retention

We retain your email address and all newsletter preferences (cities, venues, genres) until you unsubscribe or request deletion. After unsubscribing, your data is retained for 30 days before being permanently deleted. After manual deletion via the link in any newsletter email or by emailing privacy@gigwhere.com, all data is permanently removed from our systems immediately.

API access (developers)

If you request an API key for our public REST API, we store the name, email address, and stated purpose you provide, plus aggregate per-endpoint request counts for your key. We do not log request contents against your key. This data is processed because you requested the key (GDPR Article 6(1)(b)) and is used only to operate, secure, and rate-limit API access and to contact you about your key.

Retention follows our data-minimisation policy: a key that is never used is deleted, together with your contact details, 60 days after issuance (we email you a one-time reminder about two weeks before); a key that stops being used is deleted 180 days after its last request. You can have your key revoked and your details deleted at any time by emailing privacy@gigwhere.com.

Cookies & local storage

We use localStorage in your browser to remember:

  • Your theme preference (dark/light mode).
  • Your cookie consent choice.
  • Whether you have previously declined the browser location prompt; stored as gw_geo_denied so we do not re-ask on page load. You can reset this by clearing your browser's site data.

None of these values are sent to our servers or shared with third parties. They are purely functional.

Geolocation (“Near Me” feature)

The “Near Me” feature uses your browser's geolocation API to find concerts near you. Your location data is processed entirely in your browser and is never sent to or stored on our servers.

Third-party services

  • Cloudflare:We use Cloudflare for DNS, DDoS protection, TLS termination, and edge caching. All traffic passes through Cloudflare's network. Cloudflare may log IP addresses and request metadata for security purposes. Cloudflare is GDPR-compliant and has signed Standard Contractual Clauses (SCCs) for data transfers. See Cloudflare's Privacy Policy. Note: subscribe, unsubscribe, and confirmation flows are excluded from edge caching; they always hit our origin servers directly.
  • Ticketmaster, Eventim, Nortic, Billetto, Tickster: We fetch concert listings from these ticketing platforms. Some ticket links are affiliate links (see "Affiliate links" section below). Your interactions with ticket links are governed by each platform's own privacy policy.
  • Last.fm:Artist biographies and listener statistics are fetched from Last.fm's public API. No personal data is sent.
  • Cloudflare Turnstile: Our newsletter subscription form and event submission form use Cloudflare Turnstile for bot protection. A JavaScript widget is loaded from Cloudflare on those pages and analyses browser signals to verify you are human. No additional personal data beyond what Cloudflare already receives as your network provider is shared. See Cloudflare's Privacy Policy.
  • MyMemory (translation): Artist biographies sourced from Last.fm that are detected as non-English are translated to English using the MyMemory translation API. Only the biography text (no personal data) is sent to their servers. See MyMemory's terms.
  • Google Gemini: We use Google Gemini (default) to classify whether scraped events are music-related, generate city and venue descriptions, and create venue imagery. Only event titles, venue names, and description text (no personal data) are sent to Google.
  • OpenAI (GPT-4o-mini): An optional alternative to Google Gemini for music event classification and content moderation of submitted events. Only event titles, venue names, and submission text are sent; no personal data is transmitted to OpenAI.
  • Sightengine:When you submit an event with an image via our submission form, the image URL is sent to Sightengine's API for automated content moderation (checking for explicit or offensive content). Only the image URL is sent; no personal data is involved. See Sightengine's Privacy Policy.
  • iTunes Search API & Spotify Web API:We fetch artist images from Apple's iTunes Search API and Spotify's Web API. Only artist names are sent; no personal data is involved.
  • Resend: Newsletter emails are sent via Resend. Your email address is stored in our database and processed by Resend to deliver emails. Resend is GDPR-compliant and processes personal data under Standard Contractual Clauses (SCCs) for transfers outside the EU/EEA. See Resend's Privacy Policy.
  • Fonts: We use Barlow Condensed and Figtree, both self-hosted as woff2 files on our servers. No requests are made to Google or other third parties for font loading.

Affiliate links

Some ticket links on this site are affiliate links. When you click through and buy tickets, we may earn a small commission at no extra cost to you. This helps fund the operation of GigWhere.

We work with two affiliate networks:

  • Impact: handles affiliate links to Ticketmaster and its family of ticketing platforms worldwide.
  • Awin:handles affiliate links to Eventim and other ticketing platforms available via Awin's network.

When you click an affiliate link, you are redirected via the affiliate network's servers (Impact or Awin), which may set a tracking cookie on their own domain; not on gigwhere.com. We do not receive any personal data about your purchases; we only receive aggregate commission reports.

We do not load any third-party tracking scripts, pixels, or SDKs on our site for affiliate purposes. No affiliate code runs on gigwhere.com.

Analytics

We measure site usage using our own first-party analytics system. No cookies are set and no personal data is collected or stored. We record only aggregate event counts (page views, ticket link clicks, genre filter usage); raw individual events are never persisted. All data is stored on our own servers; nothing is shared with third parties. There are no third-party analytics scripts on this site.

AI usage disclosure

This site uses AI-powered services in the following ways. No personal data is involved in any of these processes.

  • Event classification: Event titles and venue names are analysed by an AI model to determine whether events are music-related.
  • Artist bio extraction: When a concert listing includes a description, an AI model extracts a short English-language artist biography from it. If the description is in another language, the AI translates the extracted bio to English. Only the event description text is sent; no personal data is involved.
  • Artist bio translation: When no description is available, artist biographies sourced from Last.fm may be translated to English via the MyMemory translation API if they are detected as non-English. Only the biography text is sent; no personal data is involved.

The AI provider used for classification and bio extraction is selected automatically each week based on cost and quality benchmarking. Possible providers include Google Gemini, OpenAI, DeepSeek, Mistral, xAI Grok, and Anthropic Claude.

Your rights (GDPR)

If you are in the EU/EEA, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct inaccurate data.
  • Right to erasure: You can request deletion of all your personal data (see below).
  • Right to data portability: You can request an export of your data in a machine-readable format.
  • Right to withdraw consent: You can withdraw your consent to newsletter processing at any time without affecting the lawfulness of prior processing.
  • Right to object: You have the right to object to processing of your personal data under Article 21 GDPR. Since we process your data solely on the basis of your consent, withdrawing that consent achieves the same effect.
  • Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority. For Sweden, this is Integritetsskyddsmyndigheten (IMY) at imy.se.

To exercise any of these rights or for privacy questions, contact us at privacy@gigwhere.com. We will respond within one month of receiving your request.

Data deletion

You can request permanent deletion of all your data by clicking the deletion link in any newsletter email, or by contacting us at privacy@gigwhere.com. Deletion is immediate and irreversible.

Changes to this policy

We may update this policy from time to time. If we make material changes to how we process your personal data, we will notify newsletter subscribers by email before the changes take effect and, where required, ask for your consent again. For all other visitors, the “Last updated” date at the top of this page is the authoritative signal that the policy has changed.

← Back to concerts