Privacy policy

To be completed, To be completed. Contact: To be completed.

• Account: email address, password (only stored in encrypted form), display name, username, optional profile photo.
• Content you create: shows (name, venue, date, optional time, type, missed or cancelled status), books (photos, texts, stickers, layout), covers and star ratings.
• Passkeys: if you add one, only its public key is stored. Your fingerprint or face never leave your device.
• Preferences: theme, accent color and language.
• Technical data: account creation date, last sign-in date, and the hosting providers' technical logs (IP address, browser type) needed to keep the service secure.
• Audience measurement on public pages: pages viewed, clicks, scrolling, time spent, referring site, country, device type and language, linked to a random identifier (see "Cookies and audience measurement").

AfterShows collects no location data, shows no ads and sells no data.

• Providing the service (creating your account, saving your shows and books, signing you in): performance of the contract, art. 6.1.b GDPR.
• Securing the service (preventing abuse, keeping technical logs) and measuring its use through aggregated internal statistics (sign-ups, active accounts, visits to public pages): legitimate interest, art. 6.1.f.
• Managing a Premium subscription once payments open, including invoicing: performance of the contract and legal accounting obligations, art. 6.1.b and 6.1.c.
• Emailing you about your account (email confirmation, password reset): performance of the contract.

Your data is only accessible to the publisher and to the technical providers that run the service:

• Supabase Inc.: database, authentication and photo storage, hosted in Paris, France (AWS region eu-west-3).
• Vercel Inc.: app hosting. The servers that handle requests are located in Paris, but Vercel is a US company.

When a provider is located outside the European Union, the transfer is covered by the EU-US Data Privacy Framework where the provider has joined it, and by the European Commission's standard contractual clauses.

Public books: when you share a book, anyone with the link can see it, along with your name and username. Until you share it, it stays private.

• Your data is kept as long as your account exists.
• When you delete your account (Profile, then "Delete my account"), your shows, books, ratings, photos and profile photo are erased immediately. Copies may remain in the hosting provider's technical backups until they are automatically overwritten.
• An account inactive for 3 years may be deleted, after a warning email.
• Audience measurement data is deleted after 25 months.
• Invoicing data (once paid Premium opens) is kept for 10 years, as required by the French Commercial Code.

AfterShows only uses strictly necessary cookies: the ones that keep you signed in, and the one that remembers your language. Your browser also remembers your theme and accent color to avoid a flash when the app opens.

On public pages only (home, guide, legal pages, login, shared books), AfterShows measures its traffic with its own tool, with no cookies and no third-party provider: a random identifier is kept for at most 13 months in your browser, no IP address is stored, and the statistics are only used by the publisher to improve the site. The app itself, once you are signed in, is not measured. This setup follows the consent-exemption conditions set by the CNIL for audience measurement; you can still opt out below, and it turns off automatically if your browser sends a Do Not Track or Global Privacy Control signal.

No advertising or social media cookies are set. That is why no consent banner is shown: these trackers are exempt from consent (article 82 of the French Data Protection Act).

You can at any time request access to your data, its rectification, erasure or portability, restrict its processing, or object to processing based on legitimate interest. You can also set instructions on what happens to your data after your death.

Your name, username, email and password can be changed directly from your profile, and your account can be deleted there too. For any other request, email To be completed. You will get an answer within one month.

If you believe your rights are not respected, you can file a complaint with the CNIL, the French data protection authority (cnil.fr/fr/plaintes), or with the authority of your EU country of residence.

AfterShows is open from age 15. Below that age, signing up requires the consent of a parent or legal guardian, in accordance with article 45 of the French Data Protection Act.

All traffic is encrypted (HTTPS), passwords are never stored in plain text, and each account can only access its own data, through rules enforced directly in the database.

This policy may change. If there is a significant change, you will be informed in the app or by email.