Privacy Policy

Rockin’ on the River is presented by the Lorain Port & Finance Authority (“LPFA,” “we,” “us”), 319 Black River Lane, Lorain, Ohio 44052. This policy applies to rockinontheriver.com and the Rockin’ on the River mobile app for iPhone and Android (together, the “Services”).

The short version

• We collect only what we need to sell and deliver your tickets, passes, and merchandise, run your account, and send the updates you ask for.
• We do not sell your information, and we do not use advertising or third-party tracking tools.
• Your card details are handled by Square, our payment processor. They never reach our servers.
• You can delete your account at any time, right in the app.

Information we collect

Information you give us

• Account: your email address, your name if you provide it, and a password. Passwords are stored securely by our sign-in provider, and we never see them.
• Purchases: the name, email, and (optionally) phone number you enter at checkout, plus pass-holder names and emails if you buy passes for others. For merchandise we also collect a shipping address.
• Forms: what you send us through contact, sponsorship, or other forms, such as your name, email, and message.

Payment information

Payments are processed by Square. When you pay by card, Apple Pay, or Google Pay, your payment details go directly to Square and are tokenized. We receive a confirmation and a payment reference, but never your full card number. Square’s handling of payment data is covered by the Square Privacy Notice (opens in a new tab).

Information collected automatically

• Push notifications (app): if you allow notifications, we store a device notification token, your device platform (iOS or Android), and which notification types you chose. If you’re signed in, we link the token to your account so you can get updates about shows you hold tickets for.
• Ticket scans: when your ticket or pass is scanned at the gate, we record the time of the scan to prevent duplicate entry.
• Basic technical data: like any website, our hosting providers process your IP address and browser information to deliver pages, prevent abuse, and keep the Services secure.

We do not use cookies for advertising or cross-site tracking. The cookies and app storage we use keep you signed in and remember your cart.

How we use your information

• To process your orders and deliver your tickets, passes, and merchandise, including emailing your tickets and receipts.
• To check tickets and passes at the gate.
• To run your account, including showing your tickets in the app and letting you transfer passes.
• To send updates you asked for: show-day information, schedule or weather changes, and order updates. You can turn notification types on or off in the app at any time.
• To answer your questions and requests.
• To prevent fraud, keep the Services secure, and meet our legal obligations.

Who we share it with

We share information only with service providers that help us run the Services, and only as needed for that work:

• Square: payment processing.
• Printful: printing and shipping merchandise orders (your name and shipping address).
• Supabase and Vercel: secure database, sign-in, and website hosting.
• Resend: sending email such as tickets, receipts, and replies.
• Apple, Google, and Expo: delivering push notifications to your device.

We may also disclose information when required by law. As a public body in Ohio, LPFA is subject to the Ohio Public Records Act. Some records may be subject to public disclosure, with personal information protected as the law allows.

How long we keep it

We keep account information while your account is open. We keep order and payment records as long as needed for ticketing, accounting, and the record-retention rules that apply to a public authority. When you delete your account, we remove your sign-in and unlink your devices from push notifications. Purchase records we are required to retain are kept separately.

Your choices

• Delete your account: in the app, go to More → Delete account. You can also email us to ask us to delete your account.
• Notifications: turn notification types on or off in the app under More → Notifications, or turn off notifications in your phone’s settings.
• Access or correction: contact us to ask about or correct the information we hold about you.

Security

We use industry-standard safeguards, including encrypted connections (HTTPS), access controls, and tokenized payments. Sign-in sessions in the app are stored encrypted on your device. No system is perfectly secure, but we work to protect your information.

Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

If we change this policy, we will post the new version on this page and update the effective date. If the changes are significant, we will give more prominent notice.

Contact us

Lorain Port & Finance Authority
319 Black River Lane, Lorain, OH 44052
admin@lorainportauthority.com · 440.204.2269
Or use our contact form.