Privacy policy

Last updated: August 14, 2026

There are no accounts and no logins here, so we collect as little as the product can run on. This policy says exactly what we have, where it lives, and how to get it removed.

What we collect, and why

• Payment details: held by Stripe, not us. Card numbers go directly to Stripe, our payment processor. We receive confirmation that a payment happened, the amount, and a transaction reference. We never see or store card numbers.
• Your email, if you provide it at checkout. Used to send your passes and receipt, and to answer you if you reply. Nothing else is sent to it: no marketing, no newsletters, no list.
• Pass activity. When a pass is bought, for which venue, and when it is scanned at the door. This record is what makes a pass work once and only once, and it is our evidence in any payment dispute.
• Basic technical logs. Our hosting provider records standard web logs (IP address, browser type, pages requested) for security and operations, as essentially every website does.

What we do not do

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• No advertising trackers and no analytics profiles on pass pages.
• No location tracking. A venue knows you arrived because the door scanned your pass, not because we followed your phone.
• The only cookies or similar storage in use are those strictly necessary for the service to function, including Stripe's fraud-prevention during checkout and your browser's own local storage of your pass links so you do not lose them.

Who touches the data

Four service providers process data to run the service, each only for its function: Stripe (payments and fraud prevention), Vercel (hosting and logs), Supabase (our database, where pass and purchase records live), and Resend (sending pass emails). Venues see the passes sold and scanned for their own nights, never your card details. Beyond that, we disclose personal information only if the law genuinely requires it, or as part of a sale or merger of the business, in which case this policy still binds the data.

How long we keep it

• Purchase and pass records are kept as long as tax and card-network rules require.
• Your email can be removed from purchase records on request at any time, and receipts stop with it.
• Technical logs age out on our providers' standard schedules.

Age

The service is for adults 18 and over, and we do not knowingly collect information from anyone under 18. Venues enforce their own age requirements at the door.

California rights

If you are a California resident, you may ask us what personal information we hold about you, ask for a copy of it, ask us to correct it, or ask us to delete it, subject to the retention rules above, and we will not treat you differently for asking. Because we do not sell or share personal information for advertising, there is nothing to opt out of, but the request channel below works for anything the law gives you. We honor equivalent rights for residents of other states with similar laws.

Asking, and changes

For any privacy request, reply to your pass email or use the contact address published on this site, and tell us the email you used at checkout so we can find the records. If this policy changes in any material way, the change will be posted here with a new date before it takes effect.