the fine print

Privacy.

How this site measures its ads and handles ticket orders, in plain language.

Last updated October 18, 2026

Who we are

This website is run by Chloe Sofia Music. Questions about this notice or your information go to hello@chloesofiamusic.com.

This notice covers the advertising measurement on this site and how ticket purchases for our shows are handled. It’s a plain description of what the site does, not legal advice.

What we collect

Unless you reject tracking, this site collects:

  • Meta’s cookies on this site: _fbp (a random browser ID) and _fbc (an ad-click ID, set when you arrive from a Meta ad).
  • Your IP address and your browser’s user agent.
  • The pages you view on this site.
  • Other things you do on this site: signing up for the newsletter, sending the contact form (only the topic you pick, never your name, email or message), viewing merch and clicking Buy (the product and its price), and clicking through to music, ticket, add-to-calendar and social links.
  • On our concert ticket page: that you viewed it, when you start checkout (number of tickets and order value) and completed ticket purchases (order value, currency, ticket count and order reference).
  • Campaign details from the ad link you arrived through (such as Facebook’s click ID, UTM tags, and campaign, ad set and ad IDs).
  • Only if you click Accept: a hashed (one-way scrambled) copy of the email address and phone number you enter at ticket checkout, sent to Meta with the purchase.

Card details are entered directly into Stripe’s secure checkout form. We never see or store them.

Why

To measure and improve our ads on Facebook and Instagram: to see which ads lead to visits and ticket sales, and to help Meta show our ads to people likely to be interested.

Who we share it with

  • Meta Platforms (Facebook, Instagram) receives the information above, through its pixel in your browser and through its Conversions API from our server. Meta may also use it for its own purposes, including personalizing the ads you see, and may keep event data for up to 2 years. See Meta’s Privacy Policy.
  • Stripeprocesses ticket payments. Its checkout runs inside our ticket page, and Stripe’s script on that page may collect device information to prevent fraud. See Stripe’s Privacy Policy.
  • Vercel hosts this website and provides our basic visit statistics.
  • Upstash stores short-lived checkout attribution and purchase-report records: the browser details above, linked to a checkout by a random reference, so a ticket purchase can be matched to the ad that led to it.

Where it's processed

Meta, Stripe, Vercel and Upstash may store and process information outside Canada, including in the United States, where it’s subject to the laws of that country and may be accessible to its authorities.

How long we keep it

  • Checkout attribution records delete themselves after 14 days, or sooner, as soon as the purchase has been reported to Meta (or won’t be). A cookie holding the random references of your five most recent checkouts lasts 14 days.
  • Records used to deliver purchase reports to Meta (order reference, value, ticket count) are deleted after 35 days. The browser details and hashed contact in them are removed sooner, as soon as the report is delivered or abandoned.
  • To prevent abuse, our server counts requests per IP address for about a minute.
  • Ad-link campaign details are stored in your browser and used for up to 7 days. After that they’re deleted the next time you open any page of this site, and right away if you reject.
  • Your privacy choice is remembered in a cookie for 12 months if you accept, or about 6 months if you reject.
  • Meta keeps event data under its own policy (up to 2 years); Stripe keeps payment records as it’s required to.

Your choices

  • Choose Reject in the banner, or use (also in the footer) at any time. Rejecting turns off the Meta pixel, removes Meta’s cookies from this site, deletes the ad-link details stored in your browser, and stops your recent ticket checkouts in this browser (up to your last five) from being reported to Meta if they haven’t been already. Your choice applies to this browser, including other tabs you have open on this site.
  • If your browser sends a Global Privacy Control signal, we treat it as Reject unless you choose Accept.
  • Manage how Meta uses your activity in your Meta ad preferences.
  • Opt out of interest-based ads from participating companies at youradchoices.ca or aboutads.info.

Access, corrections and complaints

To ask what information we hold about you, correct it, withdraw consent, or raise a concern, email hello@chloesofiamusic.com. We aim to reply within 30 days.

You also have the right to complain to the Office of the Privacy Commissioner of Canada. In Quebec, you can also contact the Commission d’accès à l’information du Québec.

Back to the home page