Effective Date: October 28, 2026
Last updated: October 28, 2026
This Privacy Policy explains how Further Triennial Inc. (“Further,” “we,” “our” and/or “us”) collects, uses and shares information when you visit furthertriennial.org, or use our web application for mobile devices, (“Website”), create a user account on our website (“User Account”), (the “Service”). If you have questions, email us at privacy@furthertriennial.org.
The short version: you can browse the Website without a User Account. If you create a User Account, we use your email address to sign you in and, only if you choose, to send our newsletter. Your bookmarks stay private unless you share a list, and shared lists show your username, never your real name. If you allow marketing cookies, advertising partners such as Meta and Google may use cookies and pixels on our Website to measure our campaigns and show you Further ads on other websites and apps. We do not sell your personal information for money.
Information you give us
Information collected automatically
Information stored only on your device
If you bookmark items on our Website without a User Account, those bookmarks are saved in your browser’s local storage. They are not sent to us until you create a User Account or sign in to an existing User Account, at which point we copy them to your User Account.
We do not knowingly collect sensitive personal information such as government ID numbers, financial account details, health information or precise geolocation.
We share personal information only as described here.
Cookies are small files a website stores in your browser. We use these kinds:
| Type | What it does | Examples | Can you turn it off? |
|---|---|---|---|
| Strictly necessary | Keeps you signed in; remembers your cookie choices; holds an NFC check-in while you sign in | Session token; consent cookie; NFC check-in cookie | No; the Service needs them |
| Analytics | Counts visits and shows how pages are used | Google Analytics (_ga, ga*) | Yes |
| Marketing | Measures campaigns and, if used, advertising | Meta Pixel (Meta Ads); google Ads; DoubleClick Floodlight | Yes |
NFC check-ins. When you tap a Further NFC tag while signed out, we store that tag’s code in a cookie so we can credit the points after you sign in or create aUser Account. The cookie is deleted once the points are credited, or after 10 minutes if you do not sign in.
Local storage. Bookmarks you save without a User Account live in your browser’s local storage, not in a cookie, and are not sent to us until you sign in.
Your choices. When you first visit our Website, our consent banner lets you accept or reject non-essential cookies. You can change your choice at any time through the “Consent Preferences” link in the footer. You can also block or delete cookies in your browser settings, though signing in will not work without the session cookie. Google offers a browser add-on to opt out of Google Analytics.
Do Not Track. Browsers’ “Do Not Track” signals have no common standard, so we do not respond to them. We do honor Global Privacy Control which can be turned on in your browser.
If you create a User Account, we will email you sign-in links and important account notices. You cannot opt out of these while you have a User Account because sign-in depends on them.
The newsletter is separate from a User Account and is optional. If you create a User Account, you may choose at sign-up whether to receive the newsletter. You can unsubscribe at any time with the link in any newsletter. Unsubscribing from the newsletter does not delete your User Account. Deleting your User Account does not unsubscribe you from the newsletter.
| Information | How long |
|---|---|
| Email address, zip code, username, bookmarks and shared lists | While your User Account is active; deleted within 30 days after you delete it (ask us by email; see section 7) |
| Points and Collect Them All artist patch records | Until the end of the Triennial program plus 1 year |
| Unclaimed NFC check-in cookie | Until credited, or 10 minutes, whichever is later |
| Server and error logs | 90 days |
| Google Analytics data | 14 months (set in Google Analytics) for user- and event-level data, the longest standard GA4 allows. Aggregated reports with no user identifiers are kept indefinitely. |
| Newsletter subscription information and email address (if different from User Account) | Until you unsubscribe or delete your User Account |
| Privacy request records | 24 months |
We may keep information longer if the law requires it or to resolve disputes.
We use encryption in transit (HTTPS), access controls limited to staff who need them, and hosting providers with established security programs. Passwordless sign-in means we hold no passwords that could leak. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as the law requires.
The Service is for a general audience and is not directed to children under 13 who are unsupervised by a parent or guardian. We do not knowingly collect personal information from, or attempt to tract, target, or sell to children under 13 without parental consent. If you believe we might have any personal information from or about an individual under 13, contact us using the information below under “Contact Us.”
The Service links to artist sites, venues, ticketing and other websites we do not control. Their privacy practices are their own; please read their policies.
We will post any changes to this Privacy Policy on this page and update the “Effective date” and “Last updated” date. If we make a material change, we will notify User Account holders by email or other notification, or by posting on the Service.
Further Triennial Inc.
PO Box 190157, San Francisco CA 94119
privacy@furthertriennial.org
California residents may also contact the California Privacy Protection Agency.