Privacy policy
Auravis Productions (“we”) runs this website and the song links on it. This policy explains what we collect, why, and for how long. Questions: auravis@auravisprod.org.
This website
We use no advertising or analytics trackers, and no third-party scripts, fonts or embeds. Everything on these pages is served from our own domain. Visitors and ticket buyers get no cookies; the only cookie we set is a sign-in cookie for our own staff on private ticketing pages.
To learn which work people look at, we count actions such as opening a page, starting a video or tapping “Start a project”. We keep only daily totals per action and page. We do not store IP addresses or anything else that identifies you.
Contact form
When you send the contact form we keep what you typed — your name, email, and anything else you chose to include — so we can reply. We store it in our own database on Cloudflare and use it only to answer you. We delete it after two years, or sooner if you ask.
To stop the form being abused, we count messages per connection per day using the same kind of one-way, daily-changing code described under song link pages below. It cannot be turned back into your IP address and is deleted after two days.
Song link pages
When you open a song page (addresses starting /r/) or tap through to Spotify or Apple Music, we count it. We keep only aggregate totals — views and taps per link — together with:
- the country the visit came from, which our hosting provider derives from your connection;
- which ad or post the link belonged to, taken from the link itself.
We do not store IP addresses. We use no cookies, no advertising or analytics trackers, and no third-party scripts on these pages.
To avoid counting the same visit twice, we briefly keep a one-way, truncated code made from your connection, browser type and a random value that changes every day. It cannot be reversed into your IP address, and because the random value changes daily, it cannot connect your visits across days. These codes, and the daily value, are deleted after two days.
Tickets
When you buy tickets on a show page we keep:
- the name for each ticket and the email address you give us, the number of tickets and what you paid;
- a promo code, if you enter one, and the artist link you arrived from, if any — so we can count ticket sales per artist;
- if you add a show tee: its size, what you paid for it, and when it was picked up at the show;
- that you ticked the box confirming the ticket terms, when you did, and the exact wording you saw;
- from Stripe, whether and when the payment succeeded, the amount, Stripe’s fee, any refund, and Stripe’s reference numbers;
- at the door, when each ticket was scanned and by which staff sign-in;
- a copy of each ticket email we send you, so a message that fails can be sent again.
Payments are handled by Stripe on its own checkout page. Your card details go to Stripe, not to us — we never see or store card numbers. Stripe uses its own cookies and collects information about the payment and your device to prevent fraud, under its privacy policy.
We use these details only to issue and send your tickets, check them at the door, handle refunds and questions, report ticket totals per artist internally, and keep the records the law requires. Ticket records are stored in our own database on Cloudflare. Ticket emails are sent through Cloudflare’s email service. We do not sell your details or share them with advertisers, and we do not add you to a mailing list.
To stop checkout being abused, we count checkout starts and “send my tickets again” requests per connection per day, using the same one-way, daily-changing code described under the contact form. It is deleted after two days.
We delete buyers’ names and email addresses 180 days after the show — long enough to handle refunds and payment disputes. We keep the amounts, dates and payment references for 7 years, as tax and accounting records.
Streaming services and other sites
When you tap through to Spotify, Apple Music or a social profile, you leave this site and their privacy policies apply.
Public posts and comments
To understand what listeners respond to, we use the official APIs of platforms such as YouTube and TikTok to read publicly available posts, comments and trend data about music. We use this in aggregate to guide creative decisions. We do not collect private information, contact the people who wrote the posts, or build profiles of individuals. Short quotes may be kept as internal research notes, with a link to where they appeared.
Where data is kept
Our hosting, link counts, contact messages and ticket orders run on Cloudflare; card payments are processed by Stripe. Aggregate link totals and research notes are kept in Airtable — ticket orders never are. We do not sell data or share it with advertisers.
Your choices
Apart from contact messages and ticket orders, we do not keep information that identifies you, so there is usually nothing on file to access or delete. To see or delete a message you sent us or your ticket details — or if you believe we hold something else about you, such as a quote from one of your public posts — email auravis@auravisprod.org and we will take care of it. Payment records we must keep for tax and accounting are kept for that period only.
Changes
If this policy changes, the date at the top will change with it.