Privacy policy
Last updated: 10 November 2026
My Metal Passport (“we”) runs mymetalpassport.com, a community site where metal fans keep a passport of the shows and festivals they’ve been to and share metal places, festivals and shows. This page explains what we collect, why, and the choices you have. Questions: hello@mymetalpassport.com.
What we collect
- Your login. When you log in with Facebook we receive your name and email address. We don’t get your Facebook password, friends list or posts.
- Your passport. What you add: first show, bands you’ve seen, festivals, places you’ve been, where you’re going, your top 3, your name on the passport and your passport photo if you add one.
- Your contributions. Places, festivals and shows you add, confirmations, ratings, links, lineups and photos you add to listings, and ownership claims (including the name, work email and proof link you send with a claim).
- Friends. Who you add as a friend.
Photos are resized and re-saved before upload, which removes location data stored in them.
Why we use it
- To run your account and show your passport and contributions (needed to provide the service).
- To suggest people with the same bands and festivals, if you leave that setting on.
- To send a monthly summary email, only if you turn it on. You can turn it off any time.
- To keep the site safe: stopping spam, fake accounts and abuse.
We don’t sell your data, and we don’t use advertising trackers. Sponsored cards on the site are shown the same to everyone and don’t use your personal data.
Who can see what
You choose who sees your passport photo and your passport: everyone, friends only, or only you (My passport → Privacy). Ratings, confirmations and the places, festivals, links, lineups and photos you add to listings are visible to other members. Claims are visible only to you and our admins.
Where it’s stored
Your data is stored with Supabase in the European Union (Frankfurt, Germany). The site is hosted by Cloudflare. Login is provided by Meta (Facebook). These providers process data for us under their own security and data protection terms.
How long we keep it
As long as you have an account. When you delete your account, your login and everything linked to it are deleted right away. Backups held by our database provider expire on their normal schedule.
Your rights
You can see and correct your data in your passport, download a copy (My passport → Privacy → Download my data), and delete your account (My passport → Privacy → Delete my account). You can also ask us by email to access, correct, export or delete your data, or object to how we use it. If you’re in the EU or UK, you can complain to your local data protection authority.
Cookies and storage
We only store what’s needed to keep you logged in and remember small settings on your device. No advertising or tracking cookies.
Age
My Metal Passport is for people aged 16 and over.
Changes
If we change this policy in a meaningful way, we’ll tell you on the site before the change takes effect.