Concert Scout finds live music from a Taste and a place. You can Search without an account. This page describes what the app sends, keeps, and lets you remove.
Searches and imported Taste
Your Search text and imported Artist names go to the API. Anthropic processes Search text to read your request, and Taste with a shortlist to rank Concerts. Public Artist information comes from MusicBrainz, ListenBrainz, Last.fm and Ticketmaster. Place names go to Geoapify.
A Last.fm or ListenBrainz username is sent to that service when you import it. The app does not keep the username. The imported Artist list stays in your browser and accompanies later Searches until you remove it.
History files, including Spotify history, are read on your device. The file contents are not uploaded. Only the resulting Artist list leaves the browser with a Search. A pasted list works the same way.
Your location
Browser location is requested only when you press the location button. Coordinates go to the API to look for nearby Concerts, and stay on this device until you hide nearby Concerts or clear site storage. The app does not infer a place from your IP address. Ticketmaster receives a rounded search point or a state filter.
A connected Spotify account
An invited account can connect through Spotify’s own consent page. Its top and followed Artists are used only for exact-name lookups in a separate shelf. They never enter a model, imported Taste, or localStorage.
Access and refresh tokens are encrypted in Redis for at most seven days. The browser holds an opaque HttpOnly connection cookie. Disconnect Spotify inside Your Taste to delete the stored tokens and cookie immediately. If you clear cookies first, the server entry expires on its own within seven days.
What stays and for how long
- Saved Concerts, skipped choices and imported Taste stay in this browser until you remove them or clear site storage. Past Saved Concerts are hidden from the Saved page.
- Public Concert data is cached for six hours, Artist metadata and similarity for seven days, and place lookups for thirty days.
- Hourly limits use a hash of the client address, not a raw address in Redis. Spend counters hold numeric totals.
- App traces record step times, token counts and cost. They omit Search text, Taste, exception contents and Spotify account data.
Server and hosting logs may still contain connection metadata, request times and URLs, including coordinates on nearby requests. OAuth callback codes are removed from the app’s access-log scope. Hosting services and upstream providers have their own retention practices.
Other services
Cloudflare Turnstile checks requests for automation. The app adds no ads, advertising analytics or affiliate parameters. Upstream services process the requests they receive under their own policies; see data credits for those services.
Your controls
Remove a Saved Concert on the Saved page. Remove imported Taste inside Your Taste. Hide nearby Concerts to forget the stored location. Disconnect Spotify before clearing cookies. Browser site settings can clear all remaining local choices.
For questions, contact Atherv Vidhate through the portfolio.
Updated November 6, 2026.