Livára is a platform for live-music fans in Greece. This policy explains what personal data we collect, why we collect it, and what rights you have over it. We follow the EU General Data Protection Regulation (GDPR) and Greek data-protection law.
The data controller is Livára (info@livara.gr).
When you sign in with Google we receive your email address and profile name. We store your chosen username (handle), display name, city, and language preference. Your profile avatar is stored if you upload one.
We store the reviews you write (scores, tags, text), the events you mark as attended, your votes on the Demand Board, and your gamification data (XP, badges, level).
We log IP addresses for rate-limiting and abuse prevention. We do not store IP addresses beyond the current session window.
With your consent we use PostHog (hosted in the EU at eu.i.posthog.com) and Google Analytics to understand how people navigate the app. These tools use cookies and collect page views, session duration, and broad device/browser information. No analytics fires without your explicit consent — you can change your mind at any time by clearing your browser's local storage for livara.gr.
| Purpose | Lawful basis |
|---|---|
| Provide the service (account, reviews, check-ins) | Contract |
| Rate limiting and abuse prevention | Legitimate interest |
| Analytics and product improvement | Consent |
| Transactional emails (password reset) | Contract |
| Legal obligations | Legal obligation |
We do not sell your data. We share it only with the service providers we use to run Livára:
All providers are contractually bound to process your data only as instructed and to keep it secure.
We keep your account data while your account is active. When you delete your account, your username is anonymised to "Deleted User" and your personal details (email, display name, city, avatar) are removed. Your reviews remain on the platform under the anonymised name — they form part of the historical record of Greek live music and cannot be attributed back to you.
Analytics data is retained according to PostHog's and Google's own retention settings (typically 12–24 months).
Under GDPR you have the right to:
To exercise any right, email us at info@livara.gr. We respond within 30 days.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).
We use one essential cookie (payload-token) to keep you signed in. This cookie is HttpOnly and cannot be accessed by JavaScript. It expires after 7 days.
With your consent we also set analytics cookies from PostHog and Google Analytics. You can withdraw consent at any time — clear site data for livara.gr in your browser settings, or contact us.
Passwords are hashed. Authentication tokens are HttpOnly and signed. Database connections are encrypted in transit. We apply rate limiting on all mutation endpoints. We review our security posture regularly.
Livára is not directed at children under 16. If you believe a child has created an account, contact us and we will remove it promptly.
We may update this policy as the product evolves. We will post the updated date at the top of this page. Material changes will be communicated via email to registered users.
Questions, data requests, or complaints: info@livara.gr