Legal

Privacy Policy

Last updated August 29, 2026

Overview

ShowMyShow is a personal live-music tracker at https://www.showmyshows.tech. This policy describes how we access, use, store, and share information, including data we receive from Google when you sign in or later connect a mailbox.

Signing in with Google and connecting Gmail are separate steps. Sign-in only proves who you are. We do not read your email unless you later grant read-only Gmail access in Settings.

Google Sign-In (identity only)

When you choose Continue with Google, ShowMyShow requests only Google's identity scopes: openid, email, and profile. We receive your Google account identifier, email address, name, and profile photo.

We use that identity data to create and authenticate your account, show which account you are signed in with, and associate the shows and friends you add with you. We do not use Google Sign-In data for advertising, and we do not sell it.

  • Data received: Google user id, email, name, and profile photo
  • Stored by our auth provider (Supabase Auth) to keep you signed in
  • No offline Gmail grant and no mail access at sign-in

Gmail access (optional, separate consent)

Connecting a mailbox in Settings is optional. That flow is the only time we request the restricted Gmail scope gmail.readonly. We use it to search for ticket-confirmation messages from vendors you enable, then extract show details so we can add them to your archive.

We never send, modify, or delete mail. Refresh tokens are encrypted (AES-256-GCM) and stored so weekly sync can run. Message bodies used for extraction are redacted and capped; we do not keep full email text after a successful or exhausted extraction.

ShowMyShow's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Gmail content is sent to OpenAI only to extract the event details needed for your show history (a user-facing feature you request). We do not use Google user data to train or improve foundational or generalized AI models, and we do not sell it or use it for ads.

Information you add in the app

Shows, venues, artists, friends, and related notes you add or import are stored so you can browse and share your archive. Mutual friends who attend the same show can see that they went together. Administrators see name-only account lists for moderation, not your email or friend code.

Service providers

We use hosted processors to run the product. They only receive the data needed for their role:

  • Supabase: authentication, database, and account storage
  • Vercel: application hosting
  • Google: Sign-In, optional Gmail read access, and optional venue lookup via Places
  • OpenAI: extracting show details from ticket emails you import, plus public enrichment such as genre, lineup, and venue

Retention and deletion

We keep your account and show history until you delete them. In Settings you can disconnect a mailbox or use Delete account, which removes your ShowMyShow account, stored mailbox tokens, and attendance history as described in the confirmation dialog.

You can also revoke Google access at https://myaccount.google.com/permissions. Revoking Sign-In will stop new logins with that Google account. Revoking Gmail leaves your ShowMyShow account in place but stops mailbox sync until you reconnect.

Contact

Questions about this policy or your Google user data: hunter.r.neil@gmail.com.