Your data is yours, not everyone's.

Who we are

FestForward is an independent project that publishes two apps, FestForward: Organizer and FestForward: Festival Guide, on the App Store and Google Play, and runs the Organizer in your browser on this site. For any privacy question, or to reach the person responsible for this policy, email us at the address below.

Nothing is collected for either app

Organizers build their whole festival on-device. None of it reaches our servers until they choose to export it, with one exception: redeeming a custom template code, described under “Other services involved” below. Attendees open the app and pick their festival with no sign-ups, and their visits, likes, and notes stay on their phone until they export a keepsake. We collect no name, email, contacts, location, advertising ID, or usage analytics. And we never share or sell your data, because we never receive it in the first place.

No tracking on this site

This website runs no analytics or tracking scripts. The live configurator and attendee demos are the real apps, saving everything only to your own device. As with any website, our hosting provider may briefly retain standard server logs, like IP address and browser type, to keep the site running and secure.

Device permissions

Our apps request no device permissions at all: no camera, photos, location, contacts, or notifications. If that ever changes, we'll ask only when a feature needs it, it will work entirely on your device, and it will never send anything to us.

Deleting your data

Everything an app remembers lives on your phone. In the attendee app you can delete a single festival right where you picked it, using the trash icon beside it in your festival list. It asks first, then permanently removes that festival's notes, likes, and visit history from your phone. Other festivals you've picked are untouched, because each one keeps its own separate record. To erase everything at once instead, clear the app's data in your device settings or delete the app. Because we hold no copy on any server, either route removes everything. Exports you made are saved wherever you chose to put them, so they're yours to keep or delete.

Your rights

Laws such as the GDPR and CCPA give you the right to access, correct, or delete the personal data a company holds about you, and to know if it's sold. Apart from the short-lived technical logs described elsewhere in this policy, we don't collect or store any of your personal data, so there is nothing on our side to request, and nothing is ever sold. Your on-device data is entirely yours to view or erase, whenever you like.

Other services involved

Downloads happen through the App Store and Google Play, under Apple's and Google's own privacy policies.

Festival content, the booths, samples, and maps you browse, is hosted by Supabase, which an attendee app fetches each time you open the app. Custom template code redemption in the Organizer App goes there too. Like any web server, Supabase briefly keeps connection logs including IP address for both; it receives nothing else, because the apps send nothing else. We also count failed redemption attempts, to stop code guessing: a bare tally of timestamps, nothing attached.

This website loads everything, fonts included, from our own server, whose host keeps the brief server logs noted above. The one other company it contacts is Vercel, and only when a live demo or the configurator loads: Vercel serves those and, like any web host, keeps brief connection logs including IP address. We use no advertising, analytics, or third-party tracking SDKs in the apps or on this site.

Children's privacy

FestForward apps are not directed at children under 13. Because we collect no data from anyone, we never knowingly collect data from children. Any age restrictions for attending an event are set by each festival's organizers, not by us. If you believe a child has somehow been affected, contact us and we'll help.

How your data stays safe

We protect your data by never holding it. It stays on your device and never reaches a server we control. This website and any export connection are served only over an encrypted (HTTPS) connection.

Changes to this policy

If this policy changes, we'll update the date above, and for anything material we'll make the change clear. Continuing to use the apps or site means you accept the current version.