Privacy & Cookies
EFFECTIVE 18 AUGUST 2026 · VERSION 1.1
EVENT RADAR is a website that may be voluntarily added to a device home screen as a Progressive Web App (PWA). Opening or sharing a link does not silently install software. This PWA does not request camera, microphone or precise device-location permission and currently uses no push notifications or background service worker.
1. Who controls the information
The controller is BUY OR CRY LTD, company number 17291675, registered office: 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Privacy enquiries and rights requests: contact@buyorcry.club.
2. What we process
- Technical request information such as IP address, time, requested route, browser/device data and security signals processed by our hosting and security providers.
- Limited interaction events: landing, event selection, sharing, opening an event or map, page path and campaign labels contained in the URL.
- For an installed PWA only: a randomly generated installation identifier, stored locally and irreversibly hashed before server storage, plus broad platform type and launch activity.
- Emails and information that a person chooses to send to our contact or partner addresses.
- Device-local preferences described below. We do not receive the contents of these preferences merely because they are stored on the device.
We do not ask visitors to create an account and do not collect payment-card details through EVENT RADAR.
3. Why and on what basis
- Provide the requested service: show events, maps, weather and links requested by the visitor.
- Legitimate interests: secure the service, prevent abuse, measure aggregate use, diagnose faults, maintain accurate content and understand campaign performance.
- Consent or steps requested by you: respond when you voluntarily contact us or request a potential partnership.
- Legal obligations: keep records or respond where the law requires it.
4. Cookies and local storage
Cloudflare may set the strictly necessary __cf_bm security cookie to distinguish legitimate traffic from automated abuse. EVENT RADAR does not set advertising or cross-site behavioural-tracking cookies.
The app uses browser local storage for saved events, weather cache and interface/version preferences. These functions are local to the device and can be cleared in the browser's site-data settings. Our interaction counter sends limited events to our server without setting an analytics cookie and without including a visitor's name or email address.
When EVENT RADAR runs from an installed home-screen icon, local storage also holds a random identifier used to count aggregate installations and active installed devices. It is not derived from a phone number, advertising ID, hardware serial number or account. Clearing site data resets it. We use it only for operational measurement and partner-facing aggregate statistics.
5. Providers and external services
- OpenAI Sites and Cloudflare provide hosting, delivery, availability and security.
- PostHog EU provides an independently operated analytics cross-check. EVENT RADAR disables session recording, advertising profiles and browser persistence for this layer; IP anonymisation is enabled.
- MET Norway provides weather data using the coordinates of the selected event, not the visitor's live location.
- When you deliberately open Google Maps, an official organiser, ticket seller, music service or partner site, that external provider receives the request and applies its own privacy terms.
- Marked partner links are advertising links and may allow us to receive a commission without increasing the visitor's price.
6. Retention and security
Rate-limit identifiers are short-lived. Device-local data remains until it expires, is replaced or the visitor clears it. Detailed application interaction records under our control are retained only for operational analysis and ordinarily no longer than 90 days. PostHog analytics events may be retained for up to 12 months under the configured project policy. Pseudonymous PWA installation records are deleted after 180 days without a launch. Non-identifying daily aggregate totals may be retained to show network development over time. Security and infrastructure logs follow the provider's necessary security and retention schedules. Correspondence is kept only as long as needed for the enquiry, relationship, legal obligations or dispute protection.
We use HTTPS, transport security, an enforced Content Security Policy, restricted browser permissions, same-site request validation, bot filtering, rate limiting, anti-framing controls and security monitoring. No internet service can promise absolute security. Responsible vulnerability reports may be sent to contact@buyorcry.club.
7. International processing
PostHog analytics is configured for its European service endpoint. Other providers may process technical data outside the United Kingdom or European Economic Area. Where required, we rely on recognised adequacy arrangements or contractual safeguards supplied by the relevant provider.
8. Your rights
Depending on the applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. Contact us using the address above. You may also complain to the UK Information Commissioner's Office and, where applicable, the data-protection authority in your country. We may need to verify a requester's identity before acting.
9. Children and changes
EVENT RADAR is a general event-discovery service and is not designed to collect personal information from children. We may update this notice when the service or its providers change; the effective date and version above identify the current notice.