Privacy

Last updated: October 13, 2026

Scenaven is a small, invite-only beta run by one person in Oregon ("we" in this policy). This page covers both the public website (scenaven.com) and the app (scenaven.app). The short version: we collect what the app needs to find your shows, we never sell personal information, and there are no ads and no tracking cookies.

If you ask for an invite

We collect your name, email address, and city — plus your phone number if you ask us to text your invite instead of emailing it. We use them only to send your invite and set your home area. The form is delivered by FormSubmit to our inbox at [email protected] (email forwarding by Porkbun, mailbox by Google), and this website is hosted by Cloudflare, so your details pass through those services on the way to us.

If you use the app

• Your account — a username, a display name, and your password. Passwords are stored only as a secure hash; we never see or store the password itself. The app doesn't ask for your email address.
• Your scene — the venues and artists you follow, the areas you watch (city and map coordinates), shows you save or star, and your notification preferences.
• Your Stubs — the past shows you log: artist, venue, date, your notes, who you went with, and any artwork you add.
• Photos you upload — a profile photo, up to three personal photos per Stub, artist or Stub artwork, and screenshots you attach to a bug report. Bug reports, including their screenshots, are visible to the operator so the problem can be fixed.
• Location — only if you turn it on. Your browser then shares approximate coordinates so Discover can search near you. Coordinates are stored in your watch areas and, on your device, in the app's local storage. Turn location off any time and the app uses your city instead.
• Notifications — if you allow push notifications, we store a subscription for your browser or device (its push address, security keys, and browser type) so alerts can reach it.
• On your device — the app keeps settings like your city, location, and view preferences in your browser's local storage, and one essential cookie keeps you signed in. That cookie is not used for tracking or advertising.

Reading a ticket photo

When you import a Stub from a photo, the reading happens on your phone, in your browser — the photo is not sent to us or to an AI service to be read. Only a photo you choose to save to a Stub is stored with your account.

What your Roadies can see

Roadies are the people you connect with, by code, inside the app. Roadie connections are mutual: both people agree, and either person can remove the connection at any time.

• If your sharing setting is on — it is on by default during the beta, and you can turn it off in Settings — an approved Roadie can see your display name, your profile photo, and the shows you share: the artist, venue, and date.
• Your personal Stub notes are never shown to Roadies.
• A personal photo is shared only when you choose to share that photo with a specific Roadie.
• If you name a companion on a Stub and that person is also on Scenaven, they may be asked to confirm the show.
• Beta note: while the beta is small, the operator's own account is added as a first Roadie on new accounts, so nobody lands in an empty app. It's an ordinary Roadie connection — you can remove it like any other, and the sharing setting above controls what it can see.

Who else handles your information

Only the services that run Scenaven: Railway (app hosting, database, and nightly backups), Cloudflare (website hosting and cookieless visit counts), FormSubmit and Google (invite and help email), Porkbun (domain and email forwarding), and Pushover (alerts to the operator about the app's health and new bug reports). Ticket and event searches run against Ticketmaster, SeatGeek, Bandsintown, and venue websites; those searches carry artist names and areas, never your name or account details. When you tap out to a venue or ticket seller, their own privacy policy applies there.

We don't sell personal information. We don't share it with advertisers or data brokers. We would only disclose it if the law required it, or to protect the safety of a person or the service.

How long we keep it, and deleting it

We keep your information while your account is active. Email [email protected] and we'll delete your account and everything attached to it — Stubs, photos, follows, Roadie connections — within 30 days. Backup copies then cycle out on their own within about two weeks. If you asked for an invite and were never invited, or no longer want to be, email us and we'll delete your application the same way. You can also remove individual things yourself at any time: uploads, follows, watch areas, and Roadie connections.

Security

Passwords are hashed, sign-in cookies are protected, and the app is served over HTTPS. No system is perfect, but access to the database is limited to the operator.

Children

Scenaven is for people 13 or older. If you believe a child under 13 has an account, email us and we'll remove it.

Changes

If this policy changes, we'll update this page and the date at the top, and note significant changes in the app.