Last updated October 2026

Privacy

The short version: we keep what the app needs to work, use it only to run the app, and don’t sell it, show ads or track you. Questions or requests: hello@bandstand.info.

What we keep

• Your account: name, the name your band calls you, email address, a scrambled form of your password (never the password itself), and your photo if you add one.
• Your band’s content: songs, charts and every version of them, cues, setlists, rehearsals, the days you’ve marked off, proposals and votes, and a log of who changed what.
• Your devices: if you turn on notifications, the address your phone’s browser gives us to send them to.
• Billing: the ids Polar, the App Store or Google Play give your subscription, and when it is paid until. They keep the payment details; we never see a card.
• Server logs: addresses and pages requested, kept briefly (a few weeks at most) to keep the service working and safe.

Who sees it

The members of your band see what’s in your band. We look at data only to run the service or when you ask us to help. The companies that help us run it see only what their part needs:

• Hetzner (Germany): the server and its backups.
• SMTP2GO: sends the app’s emails (sign-up, invites, password resets).
• Polar: takes payments on the web, as merchant of record.
• Apple and Google: take payments in the iPhone, iPad and Android apps.
• Cloudflare: counts visits to bandstand.info and the demo, without cookies.

Cookies and analytics

The app uses two cookies, both needed for it to work: one keeps you signed in, one remembers which band you’re looking at. No advertising or third-party cookies, and no analytics inside the app.

Visits to this site (bandstand.info) and the public demo are counted with Cloudflare Web Analytics, which sets no cookies, doesn’t follow you across other sites and doesn’t identify you: it tells us how many people visit, which pages, and from roughly where.

How long

As long as your account or band exists. When you delete your account or band (or ask us to), it’s gone from the service at once. Copies of the database are kept only to recover from a loss, never used for anything else: nightly on the server for two weeks, on our own backup machine for 90 days, and in encrypted offsite storage, where monthly copies are kept for a year. So what you delete has left every backup within 15 months.

Your rights

Ask us for a copy of your data, to correct it, or to delete it, and we will; wherever you live, you have the rights the GDPR gives. Bandstand isn’t meant for children under 13.

Deleting your account

In the app (iPhone, iPad or Android): Account, then Delete my account at the bottom. On the web: sign in at app.bandstand.info, then Account, then Delete your account at the bottom. Either way you confirm it, and it’s done at once. Or email hello@bandstand.info from the address you sign in with, and we’ll delete it for you.

You leave every band you’re in and can’t sign in again. Your name, email, photo, sign-ins, devices, cues, proposals and votes are deleted. Chart versions you wrote and the band’s activity feed stay with the band, without your name; billing records stay for the accounts. A band you’re the only one in is deleted with you; if you’re a band’s only admin, make someone else an admin first, or delete the band. Backups lose it as they’re replaced (see How long).