Privacy Policy

What We Collect

When you create an account, we collect your email address and an optional username and display name. If you sign in with Google, we receive your name, email address, and avatar URL from Google as part of the OAuth flow. We do not receive or store your Google password.

As you use the site, we store the actions you take that power your personal features: shows you mark as attended or favorited, ratings and reviews you submit, playlists you create, dashboards you build, and tracks you tag. You can view, edit, or delete any of this at any time.

How We Use Your Data

• To provide and maintain your account and personalized features
• To display your public dashboards and playlists to other users
• To improve the site based on aggregate usage patterns
• To send important account-related communications

We do not sell your personal data to third parties.

Cookies & Local Storage

We use cookies only for authentication sessions (so you stay logged in). We also use browser local storage to remember your UI preferences (collapsed panels, player state, playback history). We do not use any third-party tracking cookies, advertising cookies, or session recording.

Analytics

We use Vercel Web Analytics to understand which pages are popular and roughly how many people visit. Vercel Analytics is cookieless and does not track individual users across sites. No personal information is collected for analytics purposes. You can read Vercel's analytics privacy policy for details.

Third-Party Services

Audio streaming is provided by Phish.in. Show and setlist data is sourced from Phish.net. The site is hosted on Vercel. Your data is stored in a Neon PostgreSQL database.

Data Retention

Your account data is retained as long as your account is active. You can request deletion of your account and associated data by contacting us via the contact page.

Your Rights

You have the following rights regarding the personal data we hold about you. These rights are available to all users regardless of where you live, including (but not limited to) anyone protected by the EU GDPR, the UK GDPR, or the California Consumer Privacy Act (CCPA).

• Right to access. You can ask us what personal data we hold about you and we will provide it.
• Right to correction. If any of your data is wrong, you can ask us to fix it. You can also update your username, display name, and avatar yourself from your settings page.
• Right to deletion. You can ask us to delete your account and all associated data. We will do this within 30 days of receiving your request, unless we are legally required to retain something specific.
• Right to data portability. You can ask for a copy of your data in a machine-readable format (JSON or CSV).
• Right to object or restrict processing. You can ask us to stop processing your data for any purpose other than what is strictly required to operate your account.
• Right to withdraw consent. Where we rely on consent to process your data, you can withdraw that consent at any time.

To exercise any of these rights, please contact us. We will respond within 30 days. If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

Children

Foul Domain is not directed to children under the age of 13, and we do not knowingly collect personal data from anyone under 13. If you believe a child has provided personal data to us, please contact us and we will delete it.

Data Security

We use industry-standard security practices to protect your data, including encrypted connections (HTTPS) for all traffic and a managed database provider. No system is perfectly secure, but we take reasonable steps to safeguard your information. If we ever discover a data breach affecting your personal data, we will notify affected users within 72 hours of becoming aware of it, in line with GDPR requirements.

Changes

We may update this policy from time to time. Significant changes will be communicated through the site. Continued use of the site after changes constitutes acceptance.

Contact

Questions about this privacy policy? Reach out via our contact page.