Privacy

hitPDX stores your email and linked sign-in methods, sessions, saved events and venues, filters, preferences and private calendar subscriptions. Passkeys store public keys; your device keeps the private keys.

We record event views, clicks, saves, hides and filter choices to personalize recommendations. Detailed ranking telemetry expires after 180 days. Your settings, saves and derived preferences remain until you clear them or delete your account. Account prompt impressions, hides and sign-ins are measured separately from event engagement.

Guests save to an account accessible through this browser’s cookie. Guest access expires after 30 idle days. Clearing cookies loses access. Signing in merges this browser’s data with your account; newer event marks win, existing account settings and default filter sets take precedence.

Feedback you send from the About page goes to our analytics provider, PostHog, with the email address only if you enter one. Plunk processes sign-in emails. Google and Apple process authentication when you choose those methods. Apple’s hidden email address may create a separate account from your usual address; link another provider in Account to use it with that account.

In the iPhone and Android apps, “Near me” uses your approximate location on your device only; it is never sent to hitPDX. Reminders are scheduled on your phone. “Calendar app” opens your phone’s own add-event screen; hitPDX cannot read your calendar. If you turn on cancellation alerts, we store your device’s push token with your account until you turn them off, and Apple (APNs) or Google (Firebase Cloud Messaging) delivers the alerts. The iPhone app keeps a random recovery code for your guest account in the iOS Keychain so a reinstall gets your guest back; it survives deleting the app, works only for guests, and is deleted when you sign in to an account.

Calendar subscription URLs are private bearer links. Anyone with your URL can read your saved calendar; reset or disable it in Account to revoke access.

You can export your data, revoke browser sessions, change your email, unlink providers, remove passkeys or delete your account in Account. Deletion requires a fresh email code and removes your account, saves, subscriptions and attributed ranking history from the live database. Operational backups, if retained by the host, expire under the host’s backup schedule.

Current and possible future uses

We may add or change features and service providers, including: analytics and diagnostics; advertising, sponsored listings and promoted events (which may be shown based on your activity in hitPDX); payments and ticketing handled by payment processors; and sharing or licensing of data with partners, including aggregated or de-identified data and, where the law allows, personal data. We do not currently sell your personal data or use it for cross-site advertising. If that changes, this page will say so, and where the law requires we will offer an opt-out or ask for consent before the change applies to you.

Other things to know

hitPDX is not directed to children under 13, and we do not knowingly collect their data. Our servers are in the United States, and your data is processed there. We may disclose data when required by law or to protect our users and service.

We may update this policy at any time by posting the new version here with a new date. Changes apply going forward. We will notify you directly (by email or in the app) before using data we already hold in a materially different way. Using hitPDX after an update means you accept it.

Questions or requests: [email protected].

Last updated: October 31, 2026.