Wristband Privacy Policy

Version 3.0 · Drafted 14 September 2026 · Revised 15 September 2026 (Moshtix venue listings) · Proposal only · Not published or effective

Publication condition: this draft describes proposed commitments. Use the established provider inventory and founder-confirmed Sydney database location. Before release, verify the remaining provider-specific locations, retention jobs, social visibility, any applicable existing-record handling, and the Moshtix access, image-rights, commercial-use and withdrawal basis identified in the accompanying research. Confirm that the deployed image host, cache behaviour and referrer controls match this text. This banner is editorial and must not be presented as an operative clause.

1. Who we are

1.1 Wristband is operated by Daniel Camilo Cartagena Nunez, a sole trader trading as Wristband, ABN 56 278 272 510, based in Western Australia. In this policy, we, us and our refer to that operator. Contact us at hello@trywristband.com about privacy, access, correction, deletion or complaints.

1.2 This policy explains how we handle personal information through Wristband's website, accounts, concert memories, catalogue contributions, social features and venue relationships. It also explains when a public venue page displays event information or artwork supplied by an independent ticketing provider. The provider's own handling after your browser contacts its service, or after you follow its link, is governed by its privacy notice and applicable law.

1.3 We make the commitments in this policy whether or not a particular activity is covered by the Australian Privacy Principles. Any additional rights or obligations imposed by applicable law continue to apply. Reading this policy or using Wristband does not, by itself, give consent to every use of personal information.

2. Information we collect

2.1 Account information includes your email address, chosen name or username, profile image if supplied, authentication identifiers, account settings and the age information requested at registration. Authentication services process credentials needed to sign you in. If you choose Google sign-in, we receive the account information authorised in that sign-in flow; this does not authorise access to your Google contacts, calendar or other unrelated content.

2.2 Your concert archive may contain events you attended or saved, dates, notes, ratings, photographs and information you enter about companions. Social features also create friend requests, connections and visibility choices. Some information identifies other people, even when they do not have an account.

2.3 Catalogue contributions include event, artist and venue details, supporting sources, proposed corrections and the information needed to review a submission. Venue contacts may provide names, business contact details, roles, logos and event material.

2.4 We also handle support correspondence, reports of harmful or infringing content, account and security records, legal-version acceptance records, export and deletion requests, and technical information such as IP addresses, browser information, request times and error records.

2.5 We do not require precise device location, government identity documents or sensitive information to maintain an ordinary concert archive. A photograph, note or attendance record can nevertheless reveal sensitive facts about you or another person. Avoid including information that is unnecessary for the feature or that you are not entitled to provide. If a separate age-assurance process becomes necessary, we will explain its information requirements before introducing it.

3. Collection and choice

3.1 We collect information directly from your inputs and use of Wristband, from the authentication provider you choose, and from people who interact with you or report content. Public catalogue and upcoming-event information may also come from permitted external sources, including a ticketing provider's event interface. Public availability does not mean that every personal detail or protected item should be copied into the catalogue.

3.2 You can browse available public pages without creating an account. An account requires enough information to authenticate you and establish eligibility. Optional profile details, photographs and private notes are not required for ordinary registration. Not providing information needed for a particular request may prevent us from fulfilling that request.

3.3 We provide additional information at collection where a feature introduces a materially different purpose, recipient or consequence. Where consent is required, we seek it separately and provide a way to withdraw it for future optional processing. Withdrawal does not undo processing already lawfully completed.

4. How we use information

4.1 We use information to authenticate accounts, maintain your archive, apply your sharing choices, operate friend features, review catalogue submissions, respond to requests and reports, prevent misuse, diagnose faults and administer the service.

4.2 We may use limited operational measurements to understand whether features work and to improve reliability. We do not treat private notes, private photographs or friends-only activity as public catalogue material. We do not sell identifiable member information, provide private archives to venues for marketing, or use private member content to train general-purpose AI models.

4.3 We do not use this policy as permission to launch targeted advertising, sell member-level attendance insights or introduce unrelated commercial uses. A materially different use requires a separate assessment, clear advance information and any legally required consent.

5. Visibility and other people

5.1 Catalogue event, artist and venue information is public. Selected profile information, such as your username and profile image, may be visible to other members through discovery and interaction features. Do not use identifying information in those fields if you do not want it visible there.

5.2 Archive and memory visibility depends on the applicable account setting and any item-specific override. An item that inherits a setting follows that setting; a friends-only item can be seen by the friends authorised for that feature; an only-me item is not shared with other members through the feature. Check the displayed audience before saving or sharing. The visibility of associated photographs and companion information must follow the relevant access controls.

5.3 Private notes and ratings are not included in the social memory view. Authorised support or safety access can still occur as described below. A person who can view shared information may remember it or copy it outside Wristband; changing the audience cannot retrieve copies already made by other people.

5.4 Only include another person's identifying details or image when you have an appropriate basis to do so. Do not upload sensitive information about them without their permission. You can report an unwanted identification, image or companion reference to hello@trywristband.com, whether or not you are a member. Include a link or enough detail to locate the content, the concern and a way to contact you. Do not send identity documents or additional sensitive material unless we explain why they are needed and provide an appropriate method.

5.5 If we become aware that material contains another person's personal information that we cannot lawfully handle, we assess the concern, restrict unnecessary access while investigating where appropriate, and remove or de-identify the information where required. Permission from an uploader does not replace any consent or other requirement that applies to our own collection or use. A person appearing in an ordinary concert photograph does not automatically mean the photograph is unlawful; we consider the content, context, audience and applicable rights.

5.6 A report does not automatically result in permanent removal. We consider its urgency, relevant evidence and the affected people's rights, and use a proportionate response. We explain the outcome where appropriate without disclosing another person's confidential information. You can request a review through the same email address. Our complaint response targets are in section 11; urgent safety concerns are prioritised.

6. Photographs, safety and staff access

6.1 Wristband processes uploaded images to produce supported image files and remove embedded metadata from the processed versions. This does not remove identifying information visible in an image, such as a face, a location or a ticket barcode. Avoid uploading tickets, identity documents or private contact information.

6.2 Upload processing is not a guarantee that every image has been reviewed or found safe. We may examine reported content and relevant account records to investigate abuse, infringement, security incidents or legal requests. We limit access to people who need it for those purposes and require them to handle information appropriately.

6.3 We do not promise that automated moderation checks every upload. Before introducing external AI processing of member content, we will assess necessity, provider handling and disclosure requirements and update the relevant collection information. Human review can be requested for a moderation decision by emailing us with its reference or relevant details.

7. Service providers and overseas handling

7.1 We use Supabase for the database, authentication and file storage; Vercel for application hosting, content delivery and operational request processing; Resend for account and service email and delivery events; and Cloudflare Turnstile for bot and abuse prevention. These services receive information relevant to their functions, including account or stored content for Supabase, request and technical information for hosting and security, and email addresses and message content for email delivery. Google processes information when you choose its sign-in service. Some providers also process limited information for their own purposes under their privacy notices; for example, Cloudflare uses Turnstile browser, device and network signals to support and improve bot detection.

7.2 Our primary Supabase database is hosted in Sydney, Australia. This does not mean every service operation takes place in Australia. Supabase account, support and subprocessor operations may involve overseas handling; Resend email services involve the United States; and Vercel and Cloudflare use infrastructure in the United States and other global locations. The countries involved can depend on routing, support and the provider's subprocessors. Database location alone does not establish the location of every media copy, backup, log or authentication operation.

7.3 We assess provider arrangements, access and safeguards appropriate to the information involved. Where Australian law makes us accountable for overseas disclosure, we take the steps it requires. We do not ask you to waive those protections simply by using Wristband.

7.4 We may disclose relevant information when required or authorised by law, to respond to a serious safety risk, or to professional advisers who need it for a legitimate matter. We assess the request and limit disclosure to what is appropriate. A possible business transfer is not unrestricted permission to disclose or sell member records: any transfer requires lawful handling, appropriate safeguards and notice where required.

7.5 Some public venue pages show temporary upcoming-event listings supplied through an independent ticketing provider. For Freo.Social, Wristband retrieves public event names, dates, ticket links and poster URLs from Moshtix; technical controls accept poster URLs only from the configured Moshtix image host. Wristband is not the ticket seller, does not receive payment details and does not send Moshtix your Wristband account details through this listing feature. Selecting Tickets takes you to Moshtix, where its terms and privacy policy apply.

7.6 Event posters in those listings are loaded by your browser directly from static.moshtix.com.au; Wristband does not copy or re-serve the image file. That request allows Moshtix and the content-delivery network serving its image host to receive ordinary connection information, including your IP address, browser and device information, and the time of the request, even if you do not select the ticket link. Wristband configures the request not to send the page address as a referrer and does not use the request for advertising or cross-site tracking. Moshtix is an independent ticketing provider in this context, not a processor acting on Wristband's instructions. Its privacy notice governs its own handling.

8. Cookies and communications

8.1 We use authentication cookies to maintain your signed-in session and refresh it when you return. Closing a tab or browser does not ordinarily sign you out. Signing out, clearing browser storage, using private browsing, or a security or session restriction may require you to sign in again. Persistent cookies do not guarantee indefinite account access.

8.2 We send account verification, security, recovery and request-related messages to operate the service. Marketing requires an appropriate consent basis and a working unsubscribe option. We action marketing unsubscribes within five working days. Opting out of marketing does not prevent essential account or security messages.

8.3 When you select a display theme, we save the preference in the wb-product-theme cookie, with an intended lifetime of one year, and in local storage under wristband-product-theme. Local storage has no application-set expiry and can be removed through your browser controls. These preferences let the site remember your chosen appearance.

8.4 You can remove cookies and local storage through your browser settings. Blocking authentication storage can prevent sign-in from working. This draft does not authorise advertising trackers. Before introducing optional analytics or advertising technologies, we will explain their purposes, recipients and relevant choices and obtain consent where required. Any consent controls must govern the actual tracking, including withdrawal for future activity.

9. Retention and deletion

9.1 We retain account and archive information while it is needed to provide the service, unless you remove it sooner. When you request account deletion, ordinary account access is disabled and a 30-day recovery period applies before the permanent deletion process. Contact us promptly if the request was a mistake. Removal from active systems and expiry of protected backups are separate processes.

9.2 Export files are available through time-limited links intended to expire after 24 hours and are removed by the cleanup process. Request metadata may be kept for up to 90 days. Do not forward an export link or archive to anyone you do not want to receive its contents.

9.3 The proposed routine schedule is up to 90 days for display-name history, 30 days for rate-limit records and 24 months for relevant audit and support records. We propose retaining a minimal record of legal acceptance for up to six years where necessary to establish what was agreed or handle claims. This is a retention policy, not a claim that Australian law requires every such record to be kept for six years.

9.4 We may retain limited information longer for a documented legal requirement, dispute or security investigation. We restrict that information to the relevant purpose and review the need to keep it. Backup copies are protected and expire under the applicable backup schedule rather than remaining available for ordinary use.

9.5 Public factual catalogue information can remain after an account is deleted. That does not authorise keeping your private archive, unnecessary identifying attribution or photographs indefinitely. We assess removal requests separately where a contribution contains personal information or protected material.

9.6 Upcoming Moshtix listing fields, including the poster URL but not the poster file, can be held in Wristband's running server memory for up to five minutes to provide the venue page. They are not written to the Wristband database by this feature and disappear when the cache expires or the server restarts. Your browser and the provider's image service may apply their own technical caching rules to the poster request; those are not Wristband database retention.

10. Security and incidents

10.1 We use access controls, authentication, restricted media access and other reasonable technical and organisational measures appropriate to the service. No internet service can guarantee absolute security. Keep your account access secure and tell us promptly if you suspect misuse.

10.2 We investigate suspected data breaches, take containment and remediation steps, and notify affected people and regulators where applicable law requires it. We do not treat a statutory assessment period as permission to delay necessary action or notification.

11. Access, correction and complaints

11.1 Use available account controls or email hello@trywristband.com to request access, correction, an export or deletion. We may need proportionate information to verify that we are responding to the right person. Please do not send identity documents unless we explain why they are necessary and provide an appropriate method.

11.2 We aim to respond within 30 days. If a request needs more time, we will explain the reason and next steps. Access can be limited where law permits, including to protect another person's information; we will explain a refusal and available complaint options where required. A technical export limit does not remove your ability to make an access request by email.

11.3 Send complaints to the same address with enough detail for us to investigate. We aim to acknowledge them within seven days and respond within 30 days. If unresolved, you may contact the Office of the Australian Information Commissioner at oaic.gov.au where the matter falls within its jurisdiction, or another competent regulator. These targets do not limit your statutory rights.

12. Young members and changes

12.1 Wristband accounts are for people aged 16 or over. We minimise the information used to establish age and apply any additional measures required by law. A minimum age in our terms is not a guarantee that every member's age has been independently verified. Contact us about a suspected underage account or a child's information.

12.2 We date and version material changes and provide appropriate notice before they take effect. A new policy cannot retrospectively turn an unauthorised use into an authorised one. Changes involving a new purpose, operator or recipient will receive the additional assessment and choices required by law.