Who we are
eventsin.org is a small independent event aggregator. The site lists publicly announced live events across selected US states. We never ask you to register, log in, or share personal information to use it.
For privacy questions you can reach us at privacy@eventsin.org.
TL;DR
No account. No name. No email. No password. No phone number. No payment data.
No Google Analytics, no Facebook Pixel, no ads, no third-party trackers embedded in the page.
A handful of cookies that store an anonymous random ID so your votes and your chosen state stick between visits.
Our own server-side analytics: which pages were viewed, from which country and city (looked up from your IP), and which browser was used. The raw IP is kept briefly for abuse triage and then forgotten.
Information we collect
Cookies set in your browser. Three of them, all first-party, all set to SameSite=Lax:
eventsin_voter— a random UUID, valid for 1 year. Acts as your anonymous identity so the heart/skip buttons remember what you liked and the “My events” list keeps working. Not tied to any personal data on our side.eventsin_sid— a random UUID, valid for 30 minutes of inactivity. Groups your pageviews into a single browsing session in our internal analytics.eventsin_state— the two-letter code of the US state you chose (or that we guessed from your IP) so we land you in the right city on your next visit.
Legacy cookies inherited from a sibling site (kdykam_voter, kdykam_sid) may be present briefly after our migration in May 2026. They contain the same kind of random UUIDs and are retired automatically.
Things stored locally in your browser. Your theme preference (light/dark/auto), your city filter, your kind/genre filter and your tag selections live in localStorage. We can't read them from the server — they never leave your device.
Server-side analytics. Every public pageview is written to our visits table. We store: the path you visited, the language version, the referring URL (if any), your user-agent string, your country / region / city (looked up from your IP), and the two anonymous IDs above. Your IP address is stored in two forms: a SHA-256 hash with a project salt (kept for aggregate stats and bot detection) and the raw value (kept briefly for abuse triage and removed during routine pruning). We use this to understand which content works, to keep crawlers out of the human stats, and to spot abuse.
Anonymous votes. When you tap the heart or skip on an event card, we write a row linking eventsin_voter to the event ID. That's it — no name, no email, no profile.
Information we do not collect
We do not collect names, email addresses, postal addresses, phone numbers, passwords, payment details, dates of birth, or any other identifier you might find on a sign-up form. There is no sign-up form.
We do not embed Google Analytics, Google Tag Manager, Facebook Pixel, TikTok pixel, Hotjar, Clarity, advertising scripts, A/B-testing scripts, or any other third-party tracker on the page.
We do not sell, rent, or share your data with advertising networks or data brokers — and we have nothing in the form they would buy anyway.
How we use the information
To show you events in the right state and language, to remember which ones you marked as interesting, to keep the site fast, to spot bots and abusive traffic, and to look at coarse, aggregate stats (“how many US visitors looked at Arizona today”). That is the whole list.
Third parties
A few external services touch your visit in narrow, well-defined ways:
- ip-api.com — we ask this free service for the country, region and city associated with your IP address. The lookup happens on our server, not in your browser, and the result is cached on our side for 30 days so a returning visitor does not trigger another lookup.
- Our hosting provider — eventsin.org runs on a dedicated server located in the European Union. The hosting provider sees ordinary HTTP traffic (IP addresses, requested URLs) as any hosting provider does. We do not use a CDN.
- Outbound links to ticket sellers — many event cards link to Ticketmaster, Eventbrite, Bandsintown, Songkick, AllEvents, official venue pages and similar. Once you click such a link you are on their site, under their privacy policy. We do not control what they do.
- Search engines and social previews — when Googlebot, Bingbot, or a social network bot fetches a page to show a link preview, they receive only the publicly available page content.
We do not embed third-party scripts, iframes, fonts, or pixels in the page. All fonts and styles are served from our own domain.
Data retention
Raw IP addresses in our analytics table are pruned during routine maintenance and kept no longer than is useful for abuse triage (target: 30 days). The hashed form of the IP and the country/city it resolves to may be kept longer for aggregate statistics, but cannot be reversed back to the original IP.
Vote rows tied to your anonymous eventsin_voter UUID are kept as long as the cookie itself is valid — about one year — and roll off naturally as new votes replace old ones.
Backups of the entire database are kept for a rolling 30-day window for disaster recovery.
Your choices
You can clear or block our cookies in your browser at any time. The site keeps working without them — you will simply look like a brand-new visitor each time and the “My events” list will be empty.
You can use private / incognito mode to browse without any cookies persisting after you close the tab.
Because we do not collect names or emails, we have no way to identify you in our data. If you want a specific record removed (for example, all events linked to one of your eventsin_voter UUIDs), email us the UUID from your browser's cookie jar and we'll delete it.
Browser-level signals like Global Privacy Control (GPC) and Do Not Track are respected by default — there is no behavioural-advertising program for them to opt out of.
Children
eventsin.org is a general-audience website. It is not directed at children under 13, and we do not knowingly collect information from them. If a parent or guardian believes a child has used the site, contact us and we will purge any associated cookie ID on request.
International transfers
The site is operated from the Czech Republic (European Union). If you visit from the United States, technical data about your visit (IP address, requested URL, user agent) will be transmitted to and processed on a server located in the EU. By using the site you understand and consent to that transfer.
California residents
Under the California Consumer Privacy Act and California Privacy Rights Act, the categories of personal information we collect are: Internet or other network activity information (pages viewed, referer, user agent) and geolocation information at the city level, derived from your IP address. We do not collect biometric, financial, employment, or sensitive personal information.
We do not sell or share your personal information as those terms are used in the CCPA/CPRA. We have no “Do Not Sell or Share My Personal Information” process because there is nothing to opt out of.
Changes to this policy
We may update this policy occasionally to reflect what the site actually does. When we do, we will bump the “Effective date” at the top. Material changes will be announced on the homepage for at least a week.
Contact
Questions, requests, or complaints: privacy@eventsin.org.