Privacy Policy

Pulse ("we", "us") operates an events directory for the Netherlands, available at liveonpulse.com. For any privacy-related question or to exercise your rights under GDPR, contact us at privacy@liveonpulse.com.

When you create an account we store:

• your email address, for sign-in codes and the notification emails described below
• basic profile information — your handle and optional display name (both public on /u/<handle>), optional avatar, and the date your account was created
• the events, venues, and artists you save (saves are private to you by default — see "Who else sees it" below for the mutual-friend exception)
• friendships you form on Pulse: who requested whom, the state (pending / accepted), and the request and acceptance timestamps
• an invite token — a random per-user identifier behind your personal invite link. Only you can read it, and you can rotate it from /me/friends. It is used solely to authenticate the "I clicked your invite link" handshake
• optionally, your city: the town you usually go out in and how far around it to look. Only you can see it. It sets where Pulse starts showing you what's on, and you can change or remove it in settings
• if you turn on push notifications, a push subscription for each device you turn them on for: the address your browser gives us to deliver them, and which browser it is. They travel through your browser maker's push service
• session cookies needed to keep you signed in

Browsing Pulse without an account stores no personal data. Aggregate, non-identifying usage analytics may be collected in production via EU-hosted, privacy-preserving analytics; these do not identify you to us.

• Sign-in: your email is the address we send sign-in links and one-time codes to. Legal basis: performance of a contract (Art. 6(1)(b) GDPR — you asked us to sign you in).
• Notifications: we let you know about your own account and what you follow, such as a friend adding you or sharing something with you, a friend going to something you saved, a new show from an artist or organizer you follow, a reminder the day before your plans, and a weekly email if you switch it on. They come by email and, if you turn them on, by push. You choose which ones you get in your notification settings, and every notification email has a link to switch them off. Legal basis: legitimate interest in keeping you up to date on your own account (Art. 6(1)(f) GDPR); you can object at any time by switching them off.
• Saves and profile: to render your "My Favorites" page and the "filter to my favorites" toggle. Legal basis: performance of a contract.
• Service operation: minimal logs of errors. Legal basis: legitimate interest in keeping the service available (Art. 6(1)(f) GDPR).

Other Pulse users see only:

• Your public profile at /u/<handle> — handle, display name, and the month you joined. Nothing else is exposed to anonymous visitors or signed-in users who aren't your friends.
• Your saves, to mutual friends only. Once you and another user have accepted each other as friends, the events, venues, and artists you've saved become visible to that person as friend-aware indicators on cards and detail pages. This visibility is the only user-visible data shared as a result of a friendship, and it switches on at the moment the friendship is accepted (no other consent step). You can keep any of them to yourself: choose Only you as your default on your settings page, or for one event, artist, venue or organizer on its page. Friends then no longer see it on Pulse, unless you share it with them yourself.

We rely on the following categories of processors:

• Hosting and infrastructure: providers that host the website and serve its pages.
• Database and authentication: an EU-hosted provider that stores your account data and handles sign-in.
• Email delivery: a provider that sends our sign-in and notification emails.
• Product analytics: an EU-hosted, privacy-preserving analytics provider used only in production. Account activity is not linked to analytics events.

We do not sell or share your personal data. Pulse has no advertising and no tracking partners beyond the processors above.

Saves and profile data are kept until you delete your account. When you delete your account, everything we hold about you — your profile, every saved event, venue, and artist, your friendships, your invite token, your handle-change history, and your sign-in record — is hard-deleted immediately. There is no grace period and no soft-delete. See "Your rights" below.

Pulse sets:

• Session cookies — required for sign-in. These are strictly necessary and do not require consent.

Production deployments may load anonymous, privacy-preserving analytics. These do not set advertising cookies.

Under GDPR you have the right to access, rectify, port, and erase your personal data, and to object to processing. The simplest way to act on these rights is:

• Erasure: go to /settings and use "Delete account" — hard-deletes everything we hold about you, including your saves, friendships, invite token, and handle-change log.
• Access / portability: email privacy@liveonpulse.com and we will export your profile and saves as JSON within 30 days.
• Complaints: you can lodge a complaint with the Dutch Autoriteit Persoonsgegevens.

Significant changes to this policy will be announced on the sign-in screen before they take effect.