Your concert account
Last updated September 16, 2026.
What we store
We store your email address, a salted password hash, account creation date, saved shows, your interested or going status, and any price targets you set. Your password itself is not stored. These records allow your watchlist to work across devices.
Sign-in and security
An essential, HttpOnly session cookie keeps you signed in for up to 30 days. Signing out invalidates that session. Hashed, short-lived request identifiers limit repeated sign-in attempts. The tracker runs on Cloudflare Workers and D1; Cloudflare processes requests and operational logs to deliver and protect the service.
Email and newsletter preferences
Concert email delivery is currently disabled. Creating a concert account does not subscribe you to our newsletter. The separate newsletter signup is handled by Beehiiv. Do not expect a password-reset email while account email delivery is disabled.
External listings
Event images may load from the original publisher, which receives the image request. Ticket and venue links take you to external services whose own privacy policies apply. Things Toronto does not process ticket payments.
Removing your information
Use My account → Delete account in the concert tracker to remove the active account, its sessions, tokens and saved shows. Infrastructure backups and operational logs follow the hosting provider’s retention processes. Public event observations are separate from your account and are kept for up to six months.