PRIVACY · UPDATED 11 OCT 2026

We keep as little as we can.

Browse freely. Email sign-in and reminders are available only when email delivery is enabled.

Stored on your device

Opening a concert guide saves a checklist for that session in your browser, even before you tick an item. Your selections then stay in that browser. Reset it on its concert page, or clear this site's browser data to remove it. Calendar files are created on your device and contain no ticket codes. When signed in, checked items merge into your saved concerts and changes sync across devices.

When email sign-in is available, Cloudflare Turnstile verifies requests on the account page. Its widget receives browser and network information; our verification request contains the challenge token, not your email. We do not store that token.

Your saved concerts and data

If you have signed in, we store your email, language, time zone, saved concert sessions and checklist items, your reminder preference and delivery records. We do not use passwords. If you choose to add them, we also store your own stay and transport notes: place/area, dates, travel modes/times and a short note. Times are stored in UTC and shown in Taiwan time on the form. Notes sync with your account, are included in export, and are removed with a saved trip or your account. They are not saved in browser storage.

Do not enter order numbers, booking/reservation codes, passport numbers or payment details. Names are limited to 80 characters and the short note to 300. We reject obvious document/card-number and long-code patterns; this cannot identify every sensitive value, so keep notes to travel plans.

Google sign-in is offered only when enabled. If you choose it, Google provides your verified email and a stable account identifier. We use that identifier for later sign-ins and link a matching verified email to your existing account. We do not store Google's access or identity tokens. A necessary signed cookie protects this sign-in for up to 10 minutes; hashed replay markers expire separately after one hour.

A necessary, secure, HttpOnly cookie keeps you signed in for 30 days after activity. Sign-in links expire after 15 minutes and work once after confirmation. We store only hashes of tokens and session credentials. Hashed email and IP counters limit sign-in requests. Expired records are removed during daily maintenance; shared IP counters stop counting after one hour.

When delivery is enabled, Resend receives your email address and message to send requested sign-in links and reminders. Reminders are off by default; you can choose reminders 24 hours before public sale and 3 days and 1 day before saved shows, or turn them off from any reminder without signing in. Messages contain no tracking pixels or remote images. Failed sends can be retried once within the original six-hour reminder window. Delivery records stay until account deletion. Public email sign-in requires configured delivery and additional abuse protection. If you add a ticket pickup deadline to a saved trip, we store that time with your notes and, with reminders on, email you about a day before it. Copy only the time, never an order or booking code.

You can export your profile, saved concerts, checklists and security-record timestamps as JSON from your account page. Credentials and shared IP counters are excluded. Account data stays until you delete it. Deleting your account removes your data, associated sign-in tokens and email counters together, signs out all devices, and clears this browser's checklists. Shared IP counters expire separately.

Visitor accounts are separate from the editorial system.

Visit statistics

We use Cloudflare Web Analytics to count page views without cookies or individual profiles. We see totals such as pages, country and device type.

Partner links

Some links to hotels, eSIMs and travel services are affiliate links. When you click one, you leave our site and the partner may set its own cookies to credit the booking to us. Their privacy policy applies from that point. See our partner disclosure .

Hotel videos

Hotel room tours use YouTube's player at youtube-nocookie.com. The player loads only when you press the video play button. Playing a video connects your browser to YouTube, which receives browser and network information and applies its own privacy policy.

Partner network script

Our public pages load the optional Travelpayouts script only after you allow partner link statistics. Before you choose, or if you do not allow it, the script stays off and booking links keep their original addresses. It lets Travelpayouts count visits to partner links and credit bookings to us. It sets a short-lived first-party cookie called am_user_session on our domain, refreshing its approximately 30-minute expiry while the script runs. When a page loads, the script routes our partner links through a Travelpayouts tracking address and adds the address of the page you are on. We save only your allow/not-allow choice and the time you made it in this browser, until you change it or clear this site's browser data. You can withdraw below. Choosing Do not allow or withdrawing deletes this cookie and the partner's known first-party storage items. Reload to stop scripts already loaded, which can recreate the cookie; we clear it again when leaving and on the next page with consent off. This choice controls the optional script, not cookies used by partners after you follow a booking link. It does not change any other link: official ticket, map, video and hotel-website links stay as we wrote them, and we have switched off its feature that turns ordinary links into partner links. See the Travelpayouts privacy policy .

Correction reports

If you send a correction, we store the page address, the topic and your message for our editors, for up to 12 months. We do not store your email, an account or your IP address with it; a hashed address is counted for one hour to limit abuse. Reports that look like they contain an ID, card or booking number are refused.

What we never collect

• Ticket, booking or payment details
• Passport or ID numbers
• Logins for ticketing sites. Our practice tools never ask for them.

Contact

For privacy questions or requests from rights holders to remove content, email admin@encoretaiwan.com .