Tourbound
Privacy Policy

Last updated October 16, 2026

Tourbound helps you find live music. Tourbound is operated by LL CREW J, LLC. This page explains what information the site collects, why, who it is shared with, and how to have it deleted. The short version: we collect only what the features need, we do not sell your data, we do not run ads, and the only analytics is a cookieless page-view count from Cloudflare.

If you just search

You can use Tourbound without an account. When you search, the location, artist, or venue you type is used to look up shows. A typed location is matched against a list of place names kept on our own server; only places that list doesn't know are sent to OpenStreetMap's geocoding service to turn them into map coordinates. Searches are answered from our copy of JamBase's show listings. None of this includes who you are.

If you tap Near me, your browser asks your permission and then gives the site your location, rounded to about 100 meters, for that one search. It goes in the page address (so Back and sharing work) and nowhere else: the search log records only that Near me was used, and it is never stored with your account.

We also keep an anonymous log of searches so we can see which places and artists people look for and which searches come up empty. Each entry records what was typed in the location and artist or venue fields, the search filters (radius, genres, dates, event type, how recently shows were announced, and whether it was limited to artists you follow, though not which ones), how many shows were found, and when. It does not record who searched: no account, no network address, no browser details, and no cookies. Entries are deleted after 180 days.

If you sign in

You can sign in with Google or with a link we email you. From Google we receive your name, email address, profile photo, and a Google account identifier; we do not get your Google password or access to anything else in your Google account. If you ask for an email link, we send your email address to Resend, the service that delivers it, and keep a scrambled (hashed) copy of the one-time sign-in code, plus a hashed form of your IP address to stop abuse, for one day. We use these to create and recognize your account, and the same email address always opens the same Tourbound account, however you sign in. Sign-in emails are the only email we send.

We also store what you create or choose on the site:

  • your username
  • your preferences, including search radius, favorite genres, units, theme, and a default location if you set one
  • the artists you follow and the people you follow. If you import artists from a Spotify data download, the file is read in your browser and never uploaded; we receive only the artist names you choose to follow.
  • anyone you mute or block; only you can see this list, and the person isn't told
  • the shows you RSVP to
  • the tours you build and the people you invite to collaborate on them, plus a tour's group chat invite link if someone adds one (shown only to people on that tour; the chat itself happens in the chat app, and we never see it)
  • your notifications, and which kinds of notification you have turned off

Notifications and sending things to friends

Signed-in users have an inbox. When you send a show or tour to someone by username, we store who sent it, who it went to, which show or tour it was, the note if you added one, and when. The person you send it to can see your username and your note. For a private tour, sending it also gives that person access to view or edit it, the same as an invite link.

Other notifications are created by the site: a one-time welcome message when you join, when an artist you follow announces a show, when a show you RSVP'd to is cancelled, postponed, moved, or removed, and when someone follows you. A new-follower notification shows the follower's username to the person they followed; who follows whom is already visible to members through follower counts and profiles. To limit spam, we count how many shares each account has sent in the last day.

Notifications you have read are deleted after 90 days, and unread ones after 180 days. You can turn each kind off in Preferences; while one is off, no new notifications of that kind are stored for you.

What other people can see

Your username has a profile page. Anyone signed in to Tourbound can see that page (people who aren't signed in see only that the username exists), including the artists you follow, the lists of who follows you and who you follow, and the shows you have RSVP'd to. Tours appear there only if you mark them public and choose to show them on your profile.

People who follow you also see some of your activity in the feed on their home page: shows you RSVP to, public tours you start or add shows to, and artists you follow. That is the same information your profile already shows, only delivered to them. You can keep your RSVPs out of the feed in Preferences; they stay on your profile. The feed never shows who you follow, your private tours, or anything about people you have muted or blocked.

Every account follows @tourbound, the site's own account, so its announcements appear in your feed. You can unfollow or mute it like anyone else, and it won't be added back. Its follower list is not shown, since it would list everyone.

We never show your name, email address, or Google photo to anyone. Your default location stays private: it is used only to personalize your own searches and sorting and to decide which new-show alerts reach you, and it is never shown to or sent to anyone else.

Feedback

If you send feedback, we store your message, the email address if you choose to give one, the page you sent it from, and your browser's user-agent string, which helps us reproduce bugs. To limit spam, the form briefly keeps track of the network address it was sent from. That address is held in memory only and is not saved.

Cookies

We use cookies only to keep you signed in and to protect the sign-in process from forgery. There are no advertising or analytics cookies.

Analytics

The site uses Cloudflare Web Analytics to count page views and see how fast pages load. It does not use cookies, does not build a profile of you, and does not follow you to other sites.

Who we share information with

We do not sell personal information. Information reaches these services only as described:

  • Google, to let you sign in with your Google account.
  • Resend, which receives your email address to deliver sign-in links, if you use them.
  • JamBase, which receives search terms and coordinates to return show listings.
  • OpenStreetMap (Nominatim), which receives typed locations our own place list doesn't recognize, for geocoding.
  • MusicBrainz, the open music encyclopedia, which receives what you type in My Artists' Add an artist box, to suggest bands that aren't playing shows right now. Nothing about who you are is sent with it.
  • Google Maps, which draws the map when you choose Map on search results or Show route map on a tour. Your browser loads the map straight from Google, so Google sees your network address and the area on the map. We don't send Google who you are, and no map loads unless you ask for one. The driving routes between tour stops are looked up by our server using only the venues' locations.
  • Railway, which hosts the site and its database.
  • Cloudflare, which delivers the site and provides the page-view counts described above.

Ticket and hotel links take you to other companies' websites, such as ticket sellers and Booking.com. Once you follow a link, that site's own privacy policy applies. Some of those links may become affiliate links in the future; the Affiliate Disclosure explains how that would work.

When you click a hotel link, we count the click: which show it was for, how many nights the search covers, and when. The count does not record who you are, your network address, or your browser, and it uses no cookies.

If you add Tourbound to your home screen, we count it the same way: the first time it opens from your home screen, each later time you open it from there, and taps on Get the app, each with the time and whether it was a phone or tablet from Apple, an Android device, or a computer. The count does not record who you are or your network address. So that a device is counted only once, your browser remembers that it already sent that count; the site already keeps your theme choice there the same way. It is not a cookie and never leaves your device.

Keeping and deleting your information

We keep your account information for as long as you have an account. You can unfollow artists and people, remove RSVPs, and delete tours yourself at any time. Notifications are deleted on the schedule described above.

Deleting your account. You can delete your account yourself under Preferences. An administrator can also remove an account that breaks the terms. Either way, your profile, follows (both directions), RSVPs, tours, settings and notifications (including ones you sent to other people) disappear from the site right away, and tours you owned disappear for anyone you shared them with. So that a mistake can be undone, we keep a private copy of that information, together with the name, email address, profile photo and Google account identifier we received when you signed in, for 90 days. Nobody else can see it, and it is not used for anything. Signing in again within those 90 days offers to restore your account (an account an administrator removed can only be restored by us). Your username is held for you during that time. After 90 days the copy is erased permanently and the account can no longer be restored. If you would rather not wait, or you cannot sign in, email [email protected] from the address on your account and we will erase it sooner.

Messages you sent through the feedback form are kept after you delete your account, without any link to it; ask us if you want one removed. We may keep information where the law requires us to. The search log described above is not linked to any account, so it can't be picked out for one person; it is deleted on its 180-day schedule.

If you're in the UK or Europe

Tourbound lists shows in the UK and Europe, so UK and EU data protection law (the GDPR) applies to how we handle information about people there. In those terms:

  • Who is responsible: LL CREW J, LLC, which runs Tourbound, is the controller of your information. Contact us at [email protected].
  • Why we use it: to provide what you sign up for (your account, follows, RSVPs, tours, notifications and sign-in emails), which is necessary to provide the service you asked for; and, for the anonymous counts and logs described above and for keeping the site secure, our legitimate interest in running and improving Tourbound. We don't advertise, sell information, or build profiles for marketing.
  • Where it is kept: in the United States, by the services listed under “Who we share information with”, which handle it under their own data protection commitments.
  • Your rights: you can ask for a copy of your information, have it corrected or deleted, receive it in a portable form, or object to or restrict how we use it. Most of this you can do yourself on your profile and in Preferences (including deleting your account); for anything else, email us and we will answer within a month. You can also complain to your data protection authority: the Information Commissioner's Office in the UK, or the authority in your EU country.
  • Age: in the EU you need to be at least 16 (or your country's lower age for consenting online) to create an account.

Children

Tourbound is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, let us know and we will delete it.

Changes

If we change how we handle your information, we will update this page and the date at the top.

Contact

Questions or requests about your information can be sent to [email protected] or through the feedback form.