Legal

Your privacy

What we collect, why we collect it, and who else sees it. Everything below describes what the software actually does.

What we collect

Your email address
To send your tickets and your receipt. It is the only thing we genuinely need to sell you a ticket.
Your name
Printed on the ticket, and given to the organizer so they can admit you at the door.
Your phone number
Optional. Only if you give it, and only passed to the organizer of an event you bought from.
What you bought
The event, the seats, the amount, and when. We are required to keep this as a financial record.
A hashed form of your IP address
Recorded when you sign in or accept terms, as evidence of when that happened. It is hashed with a secret, so it cannot be read back as an address.
Your sign-in sessions
So you can see where you are signed in and end a session on a device you no longer have.
Email verification codes
When you create an account we email a six-digit code to prove the address is yours. Only a keyed hash of the code is stored, it expires after ten minutes, and it works once.

Who else sees it

We do not sell your details, and we do not share them with anyone not listed here.

The organizer of an event you bought from
Your name, your email, and what you bought. They need it to run the event and let you in. They may not use it to market other events to you without asking you separately.
Stripe
Takes the payment. Your card details go to Stripe directly and never reach us — we never see or store a card number.
Brevo
Sends your tickets and receipts by email.
Supabase
Hosts the database and the event images.
Google
Only if you choose to sign in with Google, and only to confirm who you are.

Cookies

One cookie, and only once you sign in: it holds your session. It is httpOnly, which means no JavaScript on the page can read it, including ours. We use no advertising or tracking cookies.

Keeping and deleting

Order and ticket records are kept as financial records for as long as the law requires. Sign-in sessions end on their own, and you can end any of them yourself from your account. To ask what we hold about you, or to have your account closed, write to privacy@eventsli.com.