Skip to content

We use a small browser storage entry to remember your cookie choice. With your consent we also load privacy-respecting analytics (Google Analytics 4 and Vercel) to understand how the site is used, and the Radio player, which plays through SoundCloud. We do not run advertising or marketing trackers. See our cookies policy and privacy policy.

LEGAL

Privacy Policy

What we collect, why, and what we do not collect.

Privacy at Tenerife.Music

Tenerife.Music is an independent music guide for Tenerife. We do not run user accounts and we do not sell anything directly. We collect only what is needed to operate the guide: to receive event submissions and venue-update requests, to answer messages you send us, to run the optional newsletter, to run analytics you have consented to, and to count outbound clicks in a form that cannot point back to you.

What we collect

Event submissions (/submit-event)

When you submit an event we receive the event details and the name and email address you provide. The submission is sent to the operator's mailbox for manual review and is not written to any database and never published automatically. We use your contact details only to review that submission and follow up with you about it.

Venue update requests (/claim-venue)

When you ask us to update a venue we receive the request and the contact details you provide. It reaches the same mailbox and is verified manually before anything on the site changes. Like a submission, it is not written to a database and never applied automatically.

Email you send us

There is no contact form on this site. If you email us at info@tenerife.music we receive whatever your message contains, and we use it to reply to you and to keep an operational record of the conversation.

Newsletter sign-up

If you subscribe, your email address is stored in our database together with the state of your subscription (pending, active or unsubscribed), a single-use token for confirming it, and the token that makes the unsubscribe link in every newsletter work. We also store which language you signed up in, so the newsletter reaches you in English or Spanish rather than guessing, and which part of the site you signed up from — a short label such as “footer” or “article”, never the page you were reading or where you went next. We do not build a profile of you and we do not track your browsing. We send a confirmation email first and only add you to the list once you click the link in it. Every newsletter contains an unsubscribe link.

Affiliate click logs (server-side)

When you click an outbound ticket or tour button it goes through /api/out/<provider> before redirecting to the partner. The server records the provider, content identifier, campaign label and source surface (e.g. event-detail). It does NOT log your IP address, User-Agent, or any other identifying request header. Your browser's User-Agent is checked in memory only, to mark the click as likely automated or not — that single yes/no answer is stored, the header itself is discarded. Records expire automatically after 30 days. The partner site you land on has its own privacy policy.

Optional analytics (only with your consent)

If — and only if — you click Accept optional on the cookie banner we load Google Analytics 4 — either directly or through Google Tag Manager, which sets no cookies of its own and runs no advertising tags — plus Vercel Analytics and Vercel Speed Insights. See the cookies policy for the exact list and durations.

What we do NOT collect

  • We do not run advertising, marketing or retargeting trackers.
  • We do not operate user accounts, passwords or login sessions for visitors.
  • We do not collect payment information — ticket purchases happen on partner sites.
  • We do not build behavioural profiles or share data with brokers.
  • We do not log IP addresses or User-Agents on the affiliate redirect (the User-Agent is only checked in memory for a likely-bot yes/no, never stored).
  • We do not use heatmaps, session-replay tools, or fingerprinting.

How long we keep data

  • Emails, submissions and venue-update requests: kept in the operator's mailbox for as long as needed to handle them, then archived or deleted.
  • Newsletter list: your address is kept while you are subscribed. Unsubscribing marks the record inactive rather than deleting it, so that an old confirmation link cannot quietly put you back on the list; ask us and we will delete it outright.
  • Affiliate click logs: 30-day TTL — automatically deleted by the database. We keep anonymous monthly totals (how many outbound clicks per partner and page type) for longer; those are counters only, with nothing that could point back to a visit.
  • Analytics data is retained by Google / Vercel under their respective retention policies.
  • Your cookie choice (tm.cookie-consent.v1): 12 months, then we re-prompt.
  • Your language choice (tm.locale-preference.v1): 12 months from your last explicit selection, then it expires and the site may suggest a language again based on your browser/region.

Third parties that may see your data

  • Resend — delivers the transactional email the site sends: submission and claim notifications to the operator, and newsletter confirmation and unsubscribe messages to you.
  • Database hosting — the newsletter subscriber list and the outbound click log are stored in a MongoDB database. Where that database is run by a hosting provider rather than by us, the provider stores the data on our behalf and for no other purpose.
  • Vercel — hosting infrastructure; receives standard request logs (IP, URL) as part of serving the page. With your consent also receives Vercel Analytics / Speed Insights data.
  • Google — only if you opt in to analytics; receives standard GA4 telemetry with IP anonymisation.
  • SoundCloud — only if you opt in to analytics; the Radio player may then prepare SoundCloud’s embedded player while paused, and playback still starts only when you press Play. SoundCloud may collect usage data for its own analytics under its cookie policy. Nothing loads from SoundCloud before analytics consent.
  • Mapbox — when you open a page with a map; serves tiles and may set its own browser storage. We do not send your personal data to Mapbox.
  • Ticket, activity and travel providers — only after you choose an outbound link. The provider you then visit (for example Ticketmaster, GetYourGuide or a venue's own box office — this is an illustration, not the complete list) processes your data under its own privacy policy from that point on.

Your rights (UK GDPR / EU GDPR)

You can ask us to:

  • Tell you what personal data we hold about you.
  • Correct inaccurate data.
  • Delete the data we hold (subject to legal retention obligations).
  • Withdraw consent (for analytics, via the Cookie settings link in the footer; for the newsletter, via the unsubscribe link in every email).
  • Object to processing or request portability.

Email info@tenerife.music for any of the above. You also have the right to lodge a complaint with your local data-protection authority (in the UK, the Information Commissioner's Office).

Contact

Email
info@tenerife.music
Address
Tenerife, Spain

Last updated: 2026-09-01

This page describes current runtime behaviour. We update it when the runtime changes (for example, if we introduce a new third-party service or a new data-retention policy).