Privacy Policy
ConcertGrid is a search and research site. It needs very little about you, and collects accordingly.
What we collect
- Request logs. Our web server records each request: your IP address, the time, the address of the page requested, the response it got, the referring page and your browser’s user agent. We use them to keep the site working and to see which pages are worth improving.
- What you type into search. A search is part of the page address, so it appears in those logs, and in the short-lived session record described below. Searches are answered from our own database and are not sent to any other service. Do not put personal information into the search box — it is not a form.
- Two cookies. Every page sets a session cookie (
concertgrid-session) and a security token (XSRF-TOKEN); both expire after two hours. The session cookie links your browser to a small record on our server holding the last page you viewed. Neither is used for advertising or to follow you to other sites. We run no analytics or advertising scripts and set no advertising cookies.
We do not ask for an account, a name, an email address or a payment method, because nothing on this site needs one.
Third parties
- Ticket marketplaces. A “View Tickets” link goes through TicketNetwork’s affiliate tracking address before reaching the marketplace. Both set their own cookies and apply their own privacy policies, including the affiliate tracking described in our affiliate disclosure, and your browser tells them which ConcertGrid page you came from. What you enter there — name, address, card details — is collected by them, not by us: commission is settled through the affiliate network, and we never receive those details.
- Maps. Venue pages can show a Google map, which loads as you scroll to it. Your browser then contacts Google, which receives your IP address, your browser details and the address of the venue page. “Open in Google Maps” links contact Google only when you follow them.
How long we keep it
Request logs are rotated daily and deleted after 14 days. The session record on our server expires after two hours and is then cleared. Our concert, venue and price-history data describes listings and events, not visitors to ConcertGrid.
Your rights
Depending on where you live, you may have the right to ask what personal data we hold about you or to have it deleted. The personal data generated by ordinary use of the site is limited to the request logs and session records described above. To find entries about you we need the IP address you used and roughly when you visited; anything older than 14 days has already been deleted. Write to us using the contact details on the About page.
Children
The site is not directed at children and we do not knowingly collect data from them.
Changes
If this policy changes, the new version appears here with a new date below.
Last updated: September 25, 2026.