Privacy Policy

Last updated: October 26, 2026

1. Introduction

Spectaculos ("we", "our") is a service of Solutions Kova. This policy covers the spectaculos.ca website and the Spectaculos mobile app (Android, "com.kova.spectaculos"), published by Solutions Kova. It describes how we collect, use and protect your personal information, in accordance with Quebec's Act respecting the protection of personal information in the private sector (Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Person in charge of the protection of personal information: the person exercising the highest authority within Solutions Kova. For any question or request about your personal information, write to [email protected].

The service is intended for people aged 18 and over. We do not knowingly collect information from minors.

2. Information Collected

We collect the following information:

• User account: name, email address, preferred city, preferred language.
• Google Sign-In: name and email address provided by Google during authentication.
• Sign in with Apple (iPhone app): an Apple identifier specific to our app, your name (sent by Apple on the first sign-in only) and your email address, which may be an Apple relay address (@privaterelay.appleid.com) if you chose to hide yours. Emails we send to a relay address go through Apple, which forwards them to your real address.
• Browsing: IP address (stored in our visit logs in an encrypted, irreversible form), browser type, pages visited, searches made on the site and clicks to ticket sellers.
• Favorites: shows you save to your favorites list.
• Newsletter: email address if you subscribe to our newsletter.
• Mobile app: a random identifier created by the app (not linked to your name, your email or your phone's identifier), which plays the same role as our visitor identifier (section 5); if you enable notifications, your device's notification token (provided by Expo) and the language chosen in the app; your activity in the app (screens viewed, searches, clicks to ticket sellers, shows added to favorites).
• Location (app): only if you allow it, for the "near me" search. Your position is used to compute the list at that moment; it is not stored on our servers.
• Newsletter from the app: your email address, confirmed by a verification email (double opt-in). Without confirmation within 7 days, the request is dropped.

3. Use of Information

Your information is used to:

• Manage your account and personalize your experience.
• Send you our weekly newsletter (if subscribed).
• Improve our website and services.
• Measure traffic to our pages and the performance of our ads.
• Know which ticket sales come from our links, so we can receive our commissions.
• Ensure site security: anti-spam protection via Google reCAPTCHA, protection of our purchase links against fraud and bots.

4. Sharing of Information

We do not sell your personal information. We may share data with:

• Google: for authentication (Google Sign-In), anti-spam protection (reCAPTCHA), traffic statistics (Google Analytics) and ad measurement (Google Ads). Their privacy policy and terms of service apply.
• Meta (Facebook, Instagram): for ad measurement, through the Meta Pixel and through events sent from our server (section 5). Their privacy policy applies.
• Microsoft: for Microsoft Clarity, which helps us understand how pages are used. Their privacy statement applies.
• Cloudflare: all site traffic goes through Cloudflare, for security and speed. Cloudflare Turnstile sometimes checks that you are not a robot before opening a purchase link.
• Brevo: to send the newsletter and account-related emails.
• Affiliate networks and ticketing platforms: when you click a purchase link, you are redirected, through affiliate networks (Impact, Viator), to Ticketmaster, Fever, Vivid Seats, SeatGeek, TicketNetwork, Viator, a venue's box office or other partners, who have their own privacy policies (section 5).
• YouTube API Services: some pages embed videos through the YouTube API Services. Accordingly, the YouTube Terms of Service and the Google Privacy Policy apply to data handled by these services.
• Apple: for Sign in with Apple in the iPhone app and the relay of emails to hidden addresses. Its privacy policy applies.
• Expo and Google (Firebase Cloud Messaging): to deliver the mobile app's notifications to your device. They receive the device's notification token and the content of the notifications, never your name or email.
• OVH: our servers are hosted by OVH in Canada (Beauharnois, Quebec).

Transfers outside Quebec and Canada. Some of these providers (Google, Apple, Meta, Microsoft, Cloudflare, Brevo, Expo, affiliate networks and ticket sellers) process data on servers located outside Quebec or Canada, notably in the United States and the European Union. They are bound by their own privacy commitments. We only send them what is described in this policy.

5. Cookies and Measurement Tools

We use our own cookies:

• Session: keeps you signed in and keeps your preferences while you browse.
• Visitor identifier (spec_vid): a random code, not linked to your name or email. It lets us count visitors, link your visits together, protect our purchase links against fraud and learn which pages lead to purchases. It lasts about 13 months and is renewed on each visit. We only store an encrypted version of it.
• Cookie choice (spec_consent): remembers your answer to the banner for 12 months.

We also load third-party tools, which set their own cookies:

• Google Analytics: traffic statistics.
• Google Ads tag: measures our Google ads and the purchases that follow.
• Meta Pixel: measures our Facebook and Instagram ads and the show pages viewed.
• Microsoft Clarity: click maps and recordings of your interactions with pages (scrolling, clicks), to improve their usability.
• Google reCAPTCHA: assesses interactions on forms to block spam.

On your first visit, a banner asks for your choice. If you decline, Google Analytics, the Google Ads tag, the Meta Pixel and Microsoft Clarity are no longer loaded in your browser on the following pages. To change your mind, clear the cookies for spectaculos.ca in your browser and the banner will reappear.

Events sent from our server. When you view a show page or click a purchase link, and when a ticket seller confirms a sale to us, our server may send the event to Meta (Conversions API). It then sends your IP address, your browser type, an approximate location derived from the IP address and our visitor identifier, the last two in encrypted form. If you declined cookies on the banner, these events are not sent to Meta. If you arrived from a Google ad and a purchase follows, the identifier of that ad click may be sent to Google Ads.

After a click to a ticket seller. Our purchase links go through affiliate networks that pay us a commission on sales. When you click, the network and the ticket seller may set their own cookies to recognize the sale. We pass them a click number and, depending on the network, our encrypted visitor identifier, never your name or email. In return, they tell us the sale amount, our commission and sometimes the buyer's city, never their name or email.

6. Data Retention

• Account, favorites, devices and notification tokens: as long as your account exists. A notification token is removed as soon as the app is uninstalled or notifications are turned off.
• Newsletter: as long as you are subscribed. Every email includes an unsubscribe link.
• Visit and activity logs (site and app): kept for our statistics, without your name or email; the IP address is stored in an irreversible encrypted form. Searches are deleted after one year.
• Clicks to ticket sellers and affiliate sales: kept for our accounts with affiliate networks, without your name or email.
• Contest entries: kept for the period set by the contest rules and by law.

7. Deleting Your Account

• In the app: Profile > Delete my account. Your password is required (except for an account created with Google or Apple). Deletion is immediate.
• On the website: write to [email protected] from your account's email address. We delete the account within 30 days and confirm it to you.

Deletion erases your account (name, email, password, link to your Google or Apple account), your favorites, your devices and notification tokens, your reminders, your interests and the newsletter subscription made from the app. Kept, without any link to your name: visit logs (encrypted IP address), clicks to ticket sellers and the resulting sales, and your contest entries, as required by their rules. An account that manages an organizer space is deleted upon request to [email protected]. For an account created with Apple, we also revoke with Apple the authorization given to our app.

8. Your Rights

You have the right to:

• Access your personal information and request a copy.
• Correct your information, in your profile or upon request.
• Withdraw your consent: decline cookies on the banner, turn off notifications in the app or phone settings, revoke the location permission.
• Unsubscribe from the newsletter at any time, through the link in every email.
• Request deletion of your account (section 7).
• File a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

To exercise these rights, write to [email protected]. We reply within 30 days.

9. Security

All communications with the site and the app are encrypted (HTTPS). Passwords are stored hashed, never in clear text. Site sessions are protected (HttpOnly, SameSite) and the app's sign-in tokens are stored as fingerprints. Forms are protected against spam (reCAPTCHA v3).

10. Changes and Contact

We may update this policy; the date at the top of the page shows the latest version. For any questions, contact us at [email protected].