Privacy.

DragRadar is operated by Robinsight Limited, registered in Aotearoa New Zealand. For any privacy question, email privacy@dragradar.nz or DM @dragradar.nz on Instagram.

If you just browse: we create an anonymous session for you so your bookmarks and favourites stick around between visits. That session is a random identifier. No name, no email, nothing personally identifying.

If you sign in (magic link, Google or Apple), we collect: your email address; your name and profile photo if your sign-in provider returns them; any avatar or display name you set yourself in settings; the list of shows you bookmark and performers you favourite.

If you're a performer who claims their page: we record which DragRadar account owns which performer page, the Instagram handle you used to verify, and the edits you make to your bio, socials, photos and bookings details.

If you subscribe to the weekly email (no account needed): we store your email address and the regions you picked, nothing else. We use double opt-in, so we only start sending once you confirm via a link. Every email has a one-tap unsubscribe, and you can delete your email from our list entirely at any time from the delete my data page.

We do not collect payment information. We do not require phone numbers. We don't store passwords.

Many performer pages on DragRadar were drafted from publicly available material like press interviews, festival programmes and public Instagram bios so each performer has a starting point. If you are listed and want changes (or want your page removed entirely), claim the page or get in touch directly. We'll always action a removal request from the named performer without making them justify it.

• Keeping you signed in and persisting your bookmarks/favourites.
• Verifying that someone claiming a performer page is the actual performer.
• Sending email you specifically asked for: magic-link sign-in, email-change confirmations, the weekly digest if you subscribed, and new-show alerts for your favourite performers if you turned those on.
• Aggregate, non-identifying counts to gauge whether the site is useful.

We never use your data to advertise to you. We never sell or rent it.

Account data is stored in Supabase (an EU/US-hosted Postgres service we've configured for our project). Email is sent via Amazon SES out of the Sydney region. Site infrastructure runs on Vercel. Each of those vendors has its own privacy posture; we choose providers that publish theirs publicly and don't rely on tracking.

We use a small number of strictly-necessary cookies for authentication (Supabase's session cookies) and one short-lived cookie used during sign-in to migrate an anonymous browsing session's bookmarks onto your real account. No tracking cookies. No third-party advertising cookies.

Under the Privacy Act 2020 (Aotearoa) you can ask us to:

• Show you what we hold about you (access).
• Correct anything that's wrong (correction).
• Delete your account and everything tied to it (the “Delete my account” button in Settings does this immediately).
• Unsubscribe from, or fully delete, an email subscription without an account, from the delete my data page or any email's unsubscribe link.
• Export your data (email us and we'll send it as JSON).

If a performer page has been written about you and you'd prefer it didn't exist, email us and it's gone. No questions, no “legitimate interest” pushback.

DragRadar isn't aimed at people under 13. We don't knowingly collect data about children. If you believe we have, email us and we'll delete it.

When this policy changes in a meaningful way, we'll update the “last updated” date at the top and, for material changes, surface a notice on the site.