Privacy Policy
Last updated: 29 June 2026
1. Who we are
FestWave ("FestWave", "we", "us") is a personalised festival-planning tool available at festwave.app. The operator responsible for processing your personal data (the data controller under the Swiss Federal Act on Data Protection, "FADP") is:
Joel Perrenoud Alte Forchstrasse 16, 8126 Zumikon, Switzerland Contact: privacy@festwave.app
2. Our privacy-first design (the most important point)
FestWave is built so that your music data never leaves your device. When you upload your exported music library (for example a CSV from Exportify) or pick artists, that information is read and matched against a festival line-up entirely in your own web browser. It is never uploaded to our servers, never transmitted to any third party, and never stored by us. If you clear your browser data, it is gone.
Because of this design, we simply do not hold your music taste, your listening history, or your library — there is nothing for us to sell, leak, or hand over.
3. What personal data we actually process
We keep the data we handle to a minimum. It is limited to:
- Payment data. Payments are processed by our payment provider, Stripe. We do not see or store your full card details. We receive limited confirmation data (e.g. that a payment succeeded, a transaction/customer reference, and for subscriptions the email address you provide) so we can unlock the content you paid for and manage your subscription.
- Email address — only if you take out a monthly subscription or ask us to restore your access. We use it to identify your active subscription and to send you access links and essential service messages.
- Technical/log data. Our hosting provider (Vercel) automatically processes standard server information such as IP address, browser type, and timestamps to deliver the site securely and reliably.
- Local browser storage. We store your taste profile and your unlock/subscription status in your own browser's local storage, on your device. This is what lets you return to a festival you've unlocked without paying again. It is not used to track you across the web.
We do not use advertising trackers, and we do not sell personal data.
4. Purposes and principles
We process the above data only to: deliver and secure the website; take payment and unlock the content you buy; manage subscriptions and access; provide support; and meet legal obligations (e.g. accounting). In line with the FADP, we process personal data in good faith, proportionately, and only for these transparent purposes.
5. Sharing with service providers
We share the limited data above only with providers that help us run the service, as our processors:
- Stripe — payment processing. See Stripe's Privacy Policy.
- Vercel — website hosting and delivery. See Vercel's Privacy Policy.
We do not otherwise disclose personal data, except where required by law.
6. International data transfers
Stripe and Vercel may process data outside Switzerland, including in the EU and the United States. Where data is transferred abroad, we rely on appropriate safeguards (such as an adequacy decision, the Swiss–U.S. Data Privacy Framework, and/or the relevant standard contractual clauses) to protect it as required by the FADP.
7. How long we keep data
- Your music data: never received by us; held only in your browser until you clear it.
- Payment and subscription records: retained as long as necessary to provide the service and to meet Swiss legal/accounting obligations (generally up to 10 years for business records).
- Server logs: kept for a short period for security and operational purposes.
8. Your rights
Under the FADP you have the right to: obtain information about (access) the personal data we process about you; request correction of inaccurate data; request deletion; object to certain processing; and, where applicable, receive data in a portable electronic format. To exercise any of these, contact us at privacy@festwave.app. We will respond within the statutory timeframe and free of charge, save in exceptional cases permitted by law.
You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB).
9. Security
We use appropriate technical and organisational measures to protect personal data, including processing music data on-device by design and using reputable providers (Stripe, Vercel) for payments and hosting.
10. Age
FestWave is intended for adults. The festivals we cover are typically 18+, and the service is not directed at children.
11. Changes
We may update this policy from time to time. The "last updated" date above shows the latest version, and material changes will be reflected on this page.
12. Contact
Questions about this policy or your data: privacy@festwave.app.