Privacy policy

When you fill in the form, we store four things:

• Your email address. Lowercased and trimmed, so the same address is not stored twice.
• Which boxes you ticked — whether you want to attend, perform, or sponsor. That is how we know what to send you.
• The IP address your signup came from. This is our record that the signup was real, and it is what stops one person from submitting the form hundreds of times.
• Timestamps for when you signed up and when you confirmed.

That is the whole list. No name, no phone number, no address, and nothing we bought from anyone else.

This site runs no analytics and no tracking of any kind. There is no Google Analytics, no advertising pixel, no session recording, and no third-party script watching what you click. The page sets no cookies.

We do not sell your email address, rent it, trade it, or hand it to a partner or sponsor. If that ever changes, it will not happen quietly to a list collected under this policy.

Entering your address is not enough to get on the list. We send one email with a confirmation link, and nothing is sent to you again until you click it. That link expires after 48 hours.

If you never click it, your address sits in the database marked unconfirmed and never receives anything else. If someone typed your address in by mistake or on purpose, ignoring that email is enough — you will not be added.

We keep the number of companies involved as small as we can. It is three:

• Supabase hosts the database your address is stored in.
• Resend sends the confirmation email, so they process your address in order to deliver it. We reach Resend through Lovable, the platform this site is built on.
• Google Fonts serves the two typefaces this site uses. Because your browser fetches those files directly from Google, Google can see your IP address and browser when a page loads. This happens on every page here, whether or not you sign up.

Nobody else. There is no CRM, no email marketing suite, and no data warehouse behind this.

Your address stays until you ask us to remove it, or until the festival mailing list is retired.

The anti-spam records described above — the IP and email entries used for rate limiting — are used for that purpose and nothing else.

Email heyheyhey@payblackartists.com and ask. You can ask us to send you everything we hold about you, correct it, or delete it entirely. You do not need to give a reason, and asking will not cost you anything.

Every email we send carries an unsubscribe link, and your mail app may show its own unsubscribe button at the top. Either one takes you off the list immediately. You can also reply to any email with the word unsubscribe, or write to the address above, and a person will handle it.

Depending on where you live, the law may give you additional rights over your data. Write to us either way and we will honour the request.

The subscriber list is not reachable from the public website. It can only be read by an administrator who is signed in, and the database refuses to serve it to anyone else. When we write to our own logs, your email and IP are recorded as scrambled fingerprints rather than the real values, so the raw data is not sitting in a log file.

No system is perfect. If we ever discover that this list has been exposed, we will tell the people on it.

If what we collect changes, this page changes with it and the date at the top moves. If a change is significant — new data, a new company touching it, a new purpose — we will email the list rather than quietly editing this page.

Write to heyheyhey@payblackartists.com. A person reads it.