Privacy Policy

Last updated: June 2026

1. Controller

Berlin Musician Listings

2. What this site does

Berlin Musician Listings aggregates publicly visible musician and band listings from external boards and lets signed-in users post community listings. We do not sell personal data.

3. Data we process

  • Account data — email address and profile details you provide when you sign up (via Supabase Auth, including optional Google sign-in).
  • Community listings — title, description, genres, optional contact links, and avatar you upload.
  • Messages — when you contact a community listing author, we store the message and send email via Resend.
  • Technical data — IP address, browser type, and request logs processed by our host (Vercel) for security and operation.
  • Scraped listings — text and metadata already published on third-party musician boards; no additional personal data is collected beyond what those sites publish.

4. Purposes and legal bases

  • Providing the search and listing service (Art. 6(1)(b) GDPR — contract / pre-contractual steps).
  • Sending contact messages you request (Art. 6(1)(b) GDPR).
  • Securing and operating the website (Art. 6(1)(f) GDPR — legitimate interest).

5. Processors and third parties

  • Supabase — authentication and database hosting.
  • Vercel — website hosting.
  • Resend — transactional email for community listing messages.
  • Google — optional OAuth sign-in (if you choose it).

Each provider processes data under its own privacy policy. Data may be processed outside the EU where providers use standard contractual clauses or equivalent safeguards.

6. Cookies and local storage

We use essential cookies and browser storage for sign-in sessions (Supabase Auth). We do not use advertising or analytics cookies.

7. Retention

Account and listing data remain until you delete listings or your account. Server logs are retained according to our host's policies. Messages sent to listing authors are stored so authors can read them in their profile inbox.

8. Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing. You may also lodge a complaint with a supervisory authority. See our Impressum.

Signed-in users can delete individual community listings and their entire account from the profile page.