This policy explains, in plain language, what personal information Atmos Fest collects on atmosfest.com and on the ticketing site tickets.atmosfest.com, why, who it is shared with, how long it is kept and how to exercise your rights. It follows Québec’s Act respecting the protection of personal information in the private sector (Law 25). The French version prevails in case of discrepancy.
Who is responsible
Information is collected by Constellation, the organization that runs Atmos Fest.
Person in charge of the protection of personal information
Quentin Dewerdt, representative of Constellation
Email: info@atmosfest.com
Mailing address: 10e Avenue, Montréal, Québec H1Y 2G6
You can send this person any question, access request or complaint about your information.
What we collect and why
We only collect what each use requires. You don’t need to provide anything to simply browse atmosfest.com.
| When | Information | Why |
|---|---|---|
| Visiting atmosfest.com | Only if you accept analytics: pages viewed, where you came from, device type, IP address processed by Google Analytics | Understand site traffic and improve its content |
| Visiting both sites, with your advertising consent | Meta pixel: pages viewed and checkout steps (never your name or email), your browser’s advertising identifiers, IP address | Know whether our Facebook and Instagram ads lead to visits and purchases |
| Visiting the ticketing site | Anonymous in-house measurement: pages viewed, where you came from, technical errors, no advertising cookie or personal identifier | Follow traffic and fix errors |
| Ticketing account | Name, email, password (never stored in plain text) or email sign-in link, language | Create and secure your account, give you access to your tickets |
| Buying tickets and options | Name and email of the buyer and ticket holders, order details, licence plate if you book parking (optional) | Issue tickets, control site access, manage parking, answer your questions, meet our accounting and tax obligations |
| Purchase, with your advertising consent | Encrypted fingerprint (SHA-256, irreversible) of your email, IP address, browser type, pre-tax amount and order items, sent to Meta by our server | Link a purchase to the ad that led to it, without ever sending your email in plain text |
| Payment | Amount and payment reference. Your card number is entered directly with Stripe: we never see it | Collect payment and prevent fraud |
| Transfer and resale | Name and email of the new holder; for sellers, the Interac or PayPal handle to receive payment | Transfer the ticket and pay out the resale |
| On-site purchases and credit | Sales linked to your ticket; at the box office, your name may appear in the Square payment note | Manage cashless credit and purchases during the festival |
| Donations and Cercle Atmos | Name, email, address (for tax receipts), public name if you agree to display it, subscription at Stripe | Process your donation or membership, issue receipts, thank you publicly if you agreed |
| Applications (artists, workshops, volunteers, partners, promoters, press) | Name, email, phone, organization, form answers, encrypted fingerprint of your IP address | Review your application and reply; the fingerprint is only used to limit abuse for 24 hours |
| Promoter referral link | Promoter code in a cookie, browser used at the time of the click | Credit the sale to the promoter who invited you |
| Newsletter and consent at checkout | Email, language, source, date and exact consent wording, encrypted fingerprint of your IP address | Send you our news and prove your consent, as required by Canada’s anti-spam law |
| Email exchanges | What you write to us | Reply to you |
We never keep an IP address in plain text: when it is used to limit abuse, only an encrypted (non-reversible) fingerprint is kept.
Cookies and browser storage
A cookie or local storage item is a small file saved on your device. Here are the ones we use:
| Name | Purpose | Duration |
|---|---|---|
atmos:consent, atmos_consent | Remember your analytics choice, the same on atmosfest.com and the ticketing site | 6 months |
atmos:consent_ads, atmos_consent_ads | Remember your advertising choice, the same on both sites | 6 months |
_ga, _ga_* | Google Analytics, only if you accepted analytics | Up to 2 years, deleted if you withdraw consent |
_fbp, _fbc | Meta pixel, only if you accepted advertising | 90 days, deleted if you withdraw consent |
atmos_touch, atmosfest:touch | Remember where your visit came from (campaign, referring site) to credit your order, with no personal identifier | 30 days |
atmosfest_ref | Credit a purchase to the promoter who sent you the link | 30 days |
| Sign-in session | Keep you signed in to the ticketing site | Until you sign out |
| Preferences and cache | Language, ticket availability, offline copy of your tickets on your device | On your device, until you clear the site’s data |
| Stripe cookies | Secure payment and prevent fraud | Set by Stripe |
Analytics and advertising stay off until you accept them, each with its own answer, and you can change your mind anytime with the “Cookie settings” link at the bottom of the page. The ticketing site’s fonts are loaded from Google Fonts, which sends your IP address to Google.
Who we share it with
We never sell or rent your information. We only entrust it to the providers needed to run the websites, who may use it only to provide that service:
| Provider | Service | Location |
|---|---|---|
| Supabase | Ticketing database, accounts and sign-in | United States |
| Netlify | Hosting of both websites | United States |
| Stripe | Online payments, Cercle memberships | Canada and United States |
| pretix | Ticket issuing software, installed on a server we manage | Canada (Québec), at OVH |
| Square | On-site payments during the festival | Canada and United States |
| Scaleway or Resend | Sending emails (tickets, confirmations, receipts) | France / United States |
| Analytics (with your consent), including the purchase sent by our server, and fonts | United States | |
| Meta Platforms | Measuring how well our ads work (pixel and Conversions API), only with your advertising consent | United States and Ireland |
| Newsletter | Subscriptions kept in our database (Supabase), sent by Scaleway | United States / France |
Some of these providers store information outside Québec. We choose them for their security and privacy guarantees. We may also disclose information when required by law.
How long we keep it
We keep your information as long as needed for the purposes above, then destroy or anonymize it. In practice:
- orders, payments and tax receipts are kept for 6 years, as required by tax laws;
- your account is kept until you ask us to delete it;
- your newsletter subscription is kept until you unsubscribe or ask for erasure;
- your analytics and advertising choices are kept for 6 months, the referral cookie and where your visit came from for 30 days.
How we protect it
- Exchanges with the websites are encrypted (HTTPS).
- Access to data is technically restricted to the team members who need it.
- Passwords are never stored in plain text and IP addresses are only kept as encrypted fingerprints.
- Card numbers never go through our servers.
If a confidentiality incident presents a risk of serious injury, we inform the Commission d’accès à l’information and the people concerned, as required by law.
Your rights
At any time, you can:
- find out what information we hold about you and get a copy, including in a structured, commonly used technological format;
- have inaccurate or incomplete information corrected;
- withdraw your consent, for example unsubscribe from the newsletter (link in every email) or refuse analytics or advertising (“Cookie settings”);
- ask for your information to be deleted, except what the law requires us to keep;
- file a complaint with the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).
To exercise these rights, write to the person in charge named above. We reply within 30 days and may ask you to confirm your identity first.
Minors
The festival is for people 18 and over. Our services are not aimed at children under 14 and we do not knowingly collect their information without a parent’s consent.
Updates to this policy
We may update this policy, for example when we add a service. The last update date is shown at the top of the page; we will announce significant changes on the websites.
Contact us
For any question about this policy or your information: info@atmosfest.com. See also our legal notice.