Privacy, accounts and notifications

When you are signed out, selected event identifiers are kept in localStorage in the browser on this device. They are not automatically shared with other devices or browsers.

After signing in, choosing to import events saved on this device adds them to the current account’s server-side saved list. The browser list is not automatically merged before you choose to import it. Unsave events or clear this site’s browser data to remove the list remaining on the device.

If you use Google sign-in, we receive your Google account identifier, name, email address, profile image URL and email verification status to create your account and verify sign-in. You do not enter your Google password into KPOP DROP. The requested scopes cover account identification, email and basic profile information.

Sign-in tokens and their expiry details are processed on the server. Access and refresh tokens are stored encrypted. A sign-in cookie and server session maintain your login; session records may include identifiers, expiry times, IP addresses and browser information. Sessions are renewed with use and currently have a 30-day expiry period.

Your account stores saved event identifiers, followed artist identifiers, events and times selected for opening alerts, alert status, language preferences, and creation and update times. This information provides cross-device saved lists and the alerts you select.

Your inbox stores the associated event, notification title, body and destination URL, creation time and read status. Delivery status and attempt records are also processed to track delivery and avoid duplicate notifications.

When you choose to enable browser alerts and grant permission, the browser’s push endpoint and encryption keys are stored against your account. Delivery uses the push service for your browser, which may be operated by Google, Apple, Mozilla or Microsoft.

Notifications can include artist and event names and a destination link. They may appear in your device’s notification area or lock screen. Check device notification settings if other people use the same device.

You can disable notifications for this browser in your account or block them in the browser’s site permissions. Turning off browser notifications does not necessarily remove artist or opening alert preferences or notifications already received. You can separately remove those alert preferences in your account.

You can unsave individual events and remove artist and opening alerts in your account. Removing an alert excludes it from future delivery; it does not erase all existing notifications or cancellation records.

Signing out ends the login session. Your account’s saved lists and settings remain available when you sign in again.

To request account deletion, open Account settings in your account panel, select Delete account and confirm. If a recent sign-in is required, sign in with Google again before retrying. Once deletion succeeds, the active database removes your account, linked sign-in records and sessions, saved events, artist and opening alert settings, push subscriptions, notifications and associated delivery records. This does not delete your Google account.

Account information and linked settings and records may remain while you keep the account. Signed-out browser saves and notifications already displayed on your device must be cleared separately on that device. Hosting access and security logs and backups may be managed separately under the provider’s retention policies.

The website and account data are processed through hosting and database services. Hosting providers may process technical records such as IP addresses, requested pages, access times and browser information to serve pages, maintain security and diagnose errors. Request counts and times may also be stored to limit excessive authentication requests.

KPOP DROP does not accept payments or event entries and does not collect card details, shipping addresses or entrant information for those purposes. Information entered after following a shopping or entry link is subject to the retailer’s or organizer’s privacy notice.

The current Google advertising configuration is shown below. When Google AdSense ads are served, Google and advertising partners may use cookies or similar technologies and process IP addresses, page URLs and browser or device information for ad delivery, measurement and fraud prevention.

You can manage cookies and site data in your browser and adjust the available controls in Google’s advertising and privacy settings. Clearing cookies or site data can sign you out or remove events saved on this device while signed out. See the links below for details of Google’s data handling and controls.

We update this notice when the handling of sign-in, saved items, notifications or advertising changes. The latest revision date appears at the top of this page.