Privacy Policy
Last updated: August 3, 2026
Afterglow ("we", "us") is a concert logging and tracking service. This policy explains what information the service collects, how it is used, and the choices you have. It applies to www.afterglo.fm and everything served from it.
Information we collect
Account information
Your email address, so you can sign in. If you sign in with Google, we receive your email address, name, and profile picture from Google to create that account. We never see or store your Google password.
Profile information
Whatever you choose to add: username, display name, bio, profile photo, and a general location (city level, with approximate coordinates, used to find concerts near you).
Concerts you log
Artists, venues, dates, your own notes, and any photos or videos you upload. You can mark individual concerts private.
People you tag
If you tag someone on a concert, we store that tag. When the person you tag is another Afterglow user we store the link to their account; otherwise we store only the name you typed.
Invitations and access requests
Afterglow is invite-only. If you invite someone, we store the email address you entered so we can send the invitation and prevent duplicates — this means we may hold an email address belonging to someone who never signs up. If you request access without an invite, we collect the email address you submit for that purpose. If you would like an address removed, contact us and we will delete it.
Feedback
If you send feedback, we collect your message and the page you sent it from.
Social activity
Who you follow and who follows you, and notifications generated from that activity.
Google Calendar data
Only if you explicitly connect Google Calendar. See the dedicated section below.
Calendar files you upload
Only if you choose to import from an exported calendar file. The file is not stored. See the dedicated section below.
Technical information
Standard server logs, and error reports used to diagnose crashes. Error reports are automatically stripped of personal fields including email addresses, names, usernames, bios, and authentication tokens before they are sent. We also record request counts to enforce rate limits and prevent abuse.
Cookies
We use cookies only to make the service work, not for advertising or cross-site tracking:
- Authentication cookies that keep you signed in.
- A short-lived cookie holding your invite code while you sign up.
- A short-lived cookie used to protect the Google Calendar connection flow against cross-site request forgery. It is deleted as soon as the connection finishes.
Google user data
Connecting Google Calendar is entirely optional. Afterglow works fully without it, and it is never requested when you sign up or sign in.
What we access
One scope: https://www.googleapis.com/auth/calendar.events.readonly. This is read-only. We cannot create, edit, or delete anything in your calendar, and we never attempt to.
We read events from your primary calendar only. We do not list or read any other calendar you own or subscribe to, which means shared calendars, work calendars, and third-party feeds such as medical or appointment calendars are never accessed.
For each event we read the title, location, and date. We also read the event description in one narrow case: events that Google itself generated from a ticket confirmation in Gmail, where the description contains machine-written ticket details. We do not read the description of events you wrote yourself.
Why we need it
To find concerts you attended and add them to your Afterglow history without you typing each one. A read-only scope is the narrowest permission that allows this; no narrower scope exposes the event titles and dates the feature depends on.
What happens to it
Calendar events are filtered on our server first, so only events that plausibly look like concerts are processed any further. Those candidates are sent to Anthropic's API, which identifies which are concerts and extracts the artist name. We then look up the venue and lineup in public concert databases. The results are shown to you for review, and nothing is saved to your account until you confirm it.
We do not store your calendar events. Events you do not import are discarded when the scan finishes. The only things retained are the concerts you explicitly choose to save and an access credential (described below) so you can scan again later without reconnecting.
Limited Use commitment
Afterglow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we do not and will not:
- Sell or transfer your Google user data to advertising platforms, data brokers, or information resellers.
- Use your Google user data for advertising, credit assessment, or lending purposes.
- Use, retain, or transfer your Google user data to develop, train, or improve generalized or foundational artificial intelligence or machine learning models. Your calendar data is used solely to deliver the concert import feature you requested.
- Allow humans to read your Google user data, except with your explicit consent for a specific issue you have raised, where necessary for security purposes, or where required by law.
Third-party processing
The concert extraction step sends the text of candidate calendar events to Anthropic's API. Anthropic acts as a service provider and processes this data only to return results to us. Under Anthropic's commercial terms, data submitted through their API is not used to train their models.
Revoking access
You can disconnect Google Calendar at any time from your Afterglow profile page. Doing so revokes our credential with Google and deletes it from our database immediately. You can also revoke access directly at myaccount.google.com/permissions. Concerts you already imported remain in your account, and you can delete them individually or all at once.
Calendar files you upload
Apple provides no way for an app to read your calendar, so importing from Apple Calendar works from a file you export yourself (in Calendar on a Mac, File › Export › Export). This grants us no access to your Apple account, and there is nothing to revoke afterwards.
We read the title, location, and date of each event in the file. We do not read event descriptions, invitees, or alerts. As with the Google import, the file is filtered on our server first, so only events that plausibly look like concerts are processed any further, and only those candidates are sent to Anthropic's API to identify the concerts and extract artist names.
The file is parsed in memory and never written to disk or stored. It exists only for the length of the import, and nothing is saved to your account until you review the results and confirm them.
Music services
If you use the playlist feature and choose to save a playlist to Apple Music, we use a token you grant to create a playlist in your library and add tracks to it. We do not read your library, listening history, or saved music. Artist and song information shown in the app comes from music catalogs using our own application credentials, not your account.
How we use your information
- To run the service: your account, profile, concert history, and social features.
- To find and enrich concert information using public concert, artist, and venue databases.
- To send transactional email, such as sign-in confirmations and invitations you choose to send.
- To keep the service working: diagnosing errors, preventing abuse, and rate limiting.
- To understand overall usage through aggregate counts, such as how many concerts have been logged. This is reviewed in aggregate, not to profile individuals.
We do not sell your personal information, and we do not serve advertising.
What other people can see
Afterglow is a social product, so some information is public by design. Your profile — username, display name, bio, photo, and general location — is visible to anyone. Concerts you log are generally visible on your public profile, along with any photos or videos attached to them. Concerts you mark private are not. Please treat anything you put in a public field as public.
Who we share information with
We do not sell your information. We share it only with vendors who process it on our behalf so the service can run, and only as much as each needs:
- Application hosting, database, and file storage providers
- A video hosting and processing provider, for videos you upload
- An email delivery provider, for transactional email
- An error monitoring provider, with personal fields stripped
- Public concert, artist, venue, and location data providers, used to look up show details
- Anthropic, which extracts concert details from text you import. We name this one specifically because it is the only vendor that receives Google user data.
We may also disclose information if required by law, or to protect the rights and safety of our users.
Data retention and deletion
We keep your information for as long as your account exists. You can delete individual concerts, or all of your concerts at once, from your profile at any time. To delete your account entirely, email wyattd2689@gmail.com and we will remove your account and associated data within 30 days.
Security
Data is transmitted over HTTPS and stored with access controls that restrict each record to its owner. Credentials such as your Google Calendar token are stored server-side and are never sent to your browser. No system is perfectly secure, and we cannot guarantee absolute security.
Children
Afterglow is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will delete it.
California privacy rights
If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion, to request a copy, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. To make a request, email wyattd2689@gmail.com.
Changes to this policy
We may update this policy as the service changes. Material changes will be reflected in the "last updated" date above, and we will make a reasonable effort to notify you in the app.
Contact
Questions about this policy or your data: wyattd2689@gmail.com.