Skip to gigs
DOOFLIST

122 Auckland doofs

Share
Link to this page

Scan

Subscribe
Open in calendar appAdd to Google Calendardooflist.com/auckland.ics

Paste the address into any calendar app and it stays up to date on its own.

Privacy

Dooflist is the complete, correct list of Auckland doofs, and a calendar feed you subscribe to once. Accounts are optional: everything works without one, and if you never sign in we hold nothing that says who you are. There is no newsletter and no advertising. This page says exactly what it does keep, why, and how to get rid of it. It is written for the New Zealand Privacy Act 2020, and the “we” throughout is Dooflist, reachable at hello@dooflist.com.

In your browser

These live on your device, not on our servers. Unless you sign in, nothing in them says who you are. Clearing your browser data removes all of them, and signs you out. Everything here is optional: the site works without any of it.

  • The key to your Going list. So the gigs you tick stay ticked when you come back, with no account. If you sign in, your list moves to your account and this is removed. Kept: 2 years from the day the list was made, or until you clear your browser data.
  • A copy of which gigs you have ticked. So the page can paint your ticks instantly without asking the server. Kept: Until you clear your browser data.
  • Your Going list's public code. So the Subscribe menu can offer you a calendar feed of just your list. Kept: Until you clear your browser data.
  • Light or dark. So the site opens in the look you chose. Kept: Until you clear your browser data.
  • Your location, if you pressed Near me or allowed it on the map. To sort gigs by distance from you. It stays on your device: it is never sent to Dooflist, never put in a link, and it is forgotten when the tab closes. Kept: Until you close the tab.
  • Which filter you just changed. A filter reloads the page, so this puts your keyboard back on it afterwards. Never what you typed. Kept: Removed as soon as the page has reloaded.
  • That you answered the offer to put your Going list in your calendar. So the offer is made once, not every time you tick a gig. Kept: Until you clear your browser data.
  • That you are signed in, if you have an account, including your email address. So you stay signed in. It can only be read by the server, never by a script on the page. Kept: 90 days from your last visit, or until you sign out.
  • A sign-in in progress. It carries the one-time code from your sign-in email, or the matching half of a Google sign-in, from one page to the next. Kept: 15 minutes at most, and it goes as soon as you are signed in.

On our servers

  • Going lists: a random code, a scrambled copy of the edit key, and the gigs on the list, past and upcoming. So a list you made in one browser can be opened as a page or a calendar feed anywhere. Without an account nothing in the list says who made it: delete it any time from the Going page in the browser that made it, or email us its code if that browser is gone. With an account it is tied to you, and it goes when you delete it or your account.
  • If you make an account: your email address, and if you signed in with Google, the name and picture address it sent. So you can sign in, and so a list can follow you between devices. We use it for sign-in email and nothing else: no newsletter, no marketing. Until you delete your account from the Account page, which removes it at once.
  • If you make an account: the handle you pick, a display name if you give one, and who may see your gigs. So a friend can add you. Nobody can search for a handle, and your gigs are friends-only unless you change that. Until you delete your account from the Account page, which removes it at once.
  • Gigs sent through the List a gig form, including the name you gave (optional) and the email or Instagram handle you left. So a person can check a detail with you before the gig goes on. The contact is never shown on the site and is not used for anything else. Your name and contact are removed automatically 90 days after we decide on the gig; the gig's own facts stay as the record of what was submitted. Email us to have them removed sooner.

The contact you leave on the List a gig form is the only thing Dooflist holds that identifies a person. Everything else is a gig, a venue, or a random code.

Counting visits

Two systems count page views, both without a cookie, a fingerprint, or a profile of you: Cloudflare Web Analytics and Vercel Web Analytics. Neither lets us tell one visitor from another, which is why there is no consent banner: there is nothing to consent to. Beyond page views, exactly two things are counted:

  • That a ticket link was clicked, and which ticket seller it went to. So we know whether the list sends people to the box office. Not which gig, and not who.
  • That Subscribe was pressed, and which calendar app and which feed. The number the whole project steers by is calendars that stay subscribed.
  • That a gig page's Add to Google Calendar link was clicked. So we know whether a one-off copy is wanted more than the subscription. Not which gig, and not who.

The calendar feed itself is not logged by Dooflist. We read Cloudflare’s overall request counts to guess how many calendars are subscribed, and chose not to count by address.

Who else sees a request

Dooflist is run on other companies’ computers, and each of them sees what any web server sees: your IP address, your browser’s name, and the page you asked for. None of them is given anything more by us, and none of them may use it for their own purposes beyond running the service.

  • Supabase: The database that holds the gigs, Going lists, accounts and submissions, and handles sign-in. Hosting. Their servers are in Singapore, so anything above that is stored leaves New Zealand.
  • Vercel: Renders the pages and resizes gig posters. Hosting. Vercel sees the same request any web server sees, and keeps a resized copy of each poster for up to 30 days.
  • Cloudflare: Serves the calendar feed and sits in front of the site. Hosting and traffic counts. Cloudflare Web Analytics counts page views without a cookie and without a profile of you; the feed is not logged by Dooflist at all.
  • Resend: Sends sign-in emails. So a sign-in link reaches you. Resend sees your email address and that a link was sent. Open and click tracking are switched off.
  • Google: Only if you choose Continue with Google. Google confirms who you are and tells us your email address, your name and your profile picture's address, which are kept with your account. We use the email for sign-in and show neither of the others. Google learns you signed in to Dooflist.
  • Vercel Web Analytics: Counts visits and the clicks listed under Counting visits, without a cookie and without a profile of you. So we know whether anybody uses the thing. Nothing it records can be tied back to you by us.
  • Discord: Tells us a gig was sent through the List a gig form: its name, date, venue and ticket link. So a submission is read the day it arrives. Your name and contact are never included.
  • CARTO: Draws the map tiles behind the map page, venue pages and the venue hover panels. Map imagery, from OpenStreetMap data. Your browser fetches the tiles directly, so CARTO sees that request like any image host would.

Because the database is in Singapore and the pages are served from wherever you are, anything listed under On our servers is stored outside New Zealand. It is held for us, under contract, and is not disclosed to anyone else.

Your rights

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted, by writing to hello@dooflist.com. If you have an account you can delete it yourself on the Account page, and everything tied to it goes at once. If you do not, almost nothing here is tied to a person, so the useful things to include are your Going list’s code (it is in the page address, after /going/) or the gig you submitted. We answer within a few days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner.

Not here

  • No passwords. Sign-in is an emailed link or Google.
  • No email list. The only email we send is the sign-in link you asked for.
  • No advertising, no ad networks, no selling or sharing of anything to anyone.
  • No social media buttons that report your visit before you press them.
  • Ticket links go straight to the seller. What you do there is between you and them.

Children

Dooflist lists events that are mostly R18 and collects nothing that would tell us how old a visitor is. If you are a parent and believe a child has left contact details through the List a gig form, email us and we will remove them.

Changes

When this page changes in substance the date at the bottom changes with it. The list of what the site stores is checked by an automated test against the site’s own code on every change, so it cannot quietly fall behind.

Last changed 2026-11-02. Questions: hello@dooflist.com.