Privacy Policy

Who we are

LPXP is an independent project with no affiliation to the band, its labels or related companies. For anything covered here, write to contact@lpxp.community.

Data you give us

• Sign-up: username, email and password. The password is stored only as a bcrypt hash, never in clear text.
• Profile: photo, cover, signature, birthday, timezone, the year you became a fan, and any profile fields you choose to fill in.
• Contributions: show attendance, memories, ratings, comments, topics, reactions, and the photos and videos you upload.

Data we collect automatically

• Your IP address at sign-up and on login attempts, used to rate-limit abuse and brute-force attacks.
• Last visit and last activity timestamps, used for the online list and profile statistics.
• Visits to your profile, shown back to you as "Recent Visitors".

We use no third-party analytics, ad trackers or advertising cookies.

Cookies

We set a single essential cookie, lpxp_token. It holds your session token, is httpOnly (unreachable by page scripts), lasts seven days, and exists only to keep you signed in. Without it you cannot use the community. Clearing it in your browser is equivalent to signing out.

Signing in with Twitter

If you sign in with Twitter, we receive your Twitter account ID, handle, display name, profile picture and, when you authorize it, the confirmed email on that account. We use this to create or identify your LPXP account.

Your handle appears on your public profile only if you tick "Show on my profile" under Edit profile > Account. It is hidden by default. You can disconnect Twitter at any time from the same screen, and revoke LPXP's access from your Twitter settings.

We never post on your behalf and never read your messages.

Who else sees your data

• Resend, which delivers the platform's transactional email (sign-up confirmation and password resets). It receives your address and the message body.
• Twitter, only if you use Twitter sign-in.

Show, setlist, song and album data comes from setlist.fm and MusicBrainz. That exchange is one-way: we pull public information from them and send nothing about you.

We do not sell, rent or share your data with advertisers.

What is public

Your username, photo, profile, contributions and statistics are visible to anyone visiting the site. Your email is never public: only the moderation team can see it. You control the visibility of the media you upload and of your Twitter handle.

How long we keep it

For as long as your account exists. If you ask for deletion we remove the account's personal data. Public content that is part of shared discussions may remain in anonymized form so the community history stays intact.

Your rights

You can view and correct your data directly under Edit profile. To request a full copy or delete your account, write to contact@lpxp.community. We answer within 30 days.

Minors

LPXP is not intended for anyone under 13 and we do not knowingly collect data from them. If you know of an account in that situation, tell us.

Changes to this policy

If we change anything material, we update the date at the top of this page and announce it in the community before it takes effect.