Privacy notice
What nshira collects, why, who it reaches, and how to get it removed. This is a description of how the product works, not a contract.
- Status
- In force
- Effective
- 21 August 2026
- Applies to
- nshira on the web
What we collect
- Your email address, or your phone number — whichever you sign in with. Signing in sends you a numeric code; there is no password.
- Your name, and a photo if you add one.
- Your date of birth. nshira has a minimum age of 14, and this is how that is checked.
- The tickets you hold, and the orders and payments behind them.
- A random id for each browser you use, so we can tell you when your account is opened somewhere new. The server stores only a scrambled copy of it.
- The city you pick, if you pick one.
Why
To sign you in, to get you a ticket and into the event, to tell you when something you care about changes, and to keep the platform working. That is the whole list.
What we do not do
We do not sell attendance data, and we do not advertise inside the product. We do not sell or share your personal information in the sense California law uses those words, which is why there is no “Do not sell my information” page here.
Who else sees it
Running nshira means using other companies. Each of them sees only what it needs to do its job:
- Supabase — the database, and sign-in.
- Resend — sends your sign-in codes and the emails about your tickets.
- Sentry — collects error reports when something breaks.
- Stripe — takes payments. Card details go straight to Stripe; nshira never sees them.
- PostHog — product analytics, described below.
- Vercel — hosts the site and measures how fast pages load.
About the analytics
Product analytics run for everyone who uses nshira. They are not something you switch on, and they are not the same thing as the privacy choices in your profile — those govern what other people can see about you.
- Events are sent through nshira’s own address rather than straight to PostHog, so an ad-blocker does not quietly change what we measure.
- Before anything leaves your browser it is stripped down to a short allowed list of properties, with a second check for anything that looks personal.
- Browsing without signing in never creates a profile of you. If you are signed in, the events are tied to your account id.
Do Not Track
Some browsers send a Do Not Track signal. We do not currently change what we do when we receive one, because our analytics do not follow you between websites. If that changes, this notice changes with it.
Seeing and changing your own data
Everything is in your profile, under Privacy. You can see what is set, change it, download a copy of your data, or delete your account.
How long we keep it
Deleting your account signs you out at once and starts a 30-day clock. Within those 30 days you can change your mind and get the account back. After that it is anonymised and cannot be recovered. Tickets and payment records are kept for as long as the law requires, whoever asked for the deletion.
Where this applies
nshira is being launched in the United States and is not being marketed in the EU or the UK. If that changes, this notice will be revisited before it does.
Changes
If this notice changes in a way that matters, we will say so rather than quietly editing the page. The date at the top is the version you are reading.