Legal
Privacy Policy
What we collect, why we collect it, who else sees it, and how to make us delete it.
Who controls your data
Sizzle LLC, d/b/a EventTicketGo operates EventTicketGo and is the controller of the data described here.
When you buy a ticket, the organizer is a controller too. They receive your name and email address so they can run their event and contact you about it. What they then do with it is governed by their own privacy practices, not ours. Contact them directly to ask them to delete it.
What we collect
If you buy a ticket
- Your name and email address.
- What you bought: the event, the seats, add-ons, the amount, and the time.
- Your ticket’s check-in record — whether and when it was scanned at the door.
- Basic technical information: IP address, browser type, and the pages you visited on our site.
We never see or store your card number. Card details go directly to Stripe. We receive only a payment reference, the amount, and the last four digits.
If you are an organizer
- Your name, email address and organization details.
- A one-way hash of your password. We cannot read your password.
- Sign-in records: approximate device, IP address and last-active time, so you can see and end sessions you do not recognise.
- Your venue and event details, and the sales they generate. Identity and bank details for payouts go to Stripe, not to us.
If you subscribe to our newsletter
Your email address and whether you confirmed it. Every message has an unsubscribe link, and unsubscribing takes effect immediately.
Why we use it, and on what basis
- To deliver your tickets and run the event. Necessary to perform our contract with you.
- To take payment and pay organizers. Contract, and legal obligation for financial records.
- To prevent fraud and abuse — rate limiting, chargeback handling, spotting bulk ticket-hoarding. Our legitimate interest in a service that works for real buyers.
- To improve the service — aggregate figures on how people move through the site. Legitimate interest.
- To send marketing. Only with your consent, and only until you withdraw it.
Who we share it with
- The event organizer — your name and email, and what you bought.
- Stripe — to process payments and pay out organizers.
- Resend — to send your tickets and our emails.
- Our hosting and database providers — Render and Supabase, who store the data on our behalf.
- Law enforcement or regulators, where we are legally required to.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
Cookies
We use a small number of cookies and similar storage: one to keep you signed in, one to remember the seats you have on hold while you check out, and one to remember your cookie choice. Analytics are only set if you accept them, and declining costs you nothing — the site works the same either way.
How long we keep it
- Order and ticket records: seven years, because they are financial records.
- Organizer accounts: while the account is open, then 90 days.
- Sign-in sessions: 14 days, or until you end them.
- Analytics: 24 months.
- Newsletter subscriptions: until you unsubscribe.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. If you are in California, you additionally have the right to know what we collect and to opt out of sale or sharing — we do neither. If you are in the UK or EU, you may complain to your data protection authority.
Email support@eventticketgo.com and we will respond within 30 days. We will never treat you differently for exercising these rights.
One limit worth stating plainly: we cannot delete an order record while it is still required as a financial record, and we cannot delete data the organizer holds separately — ask them.
Security
Traffic is encrypted in transit. Passwords are hashed and cannot be recovered by us. Ticket QR codes are not stored in a form that would let someone reading our database produce a working ticket. Sessions can be revoked individually.
Children
EventTicketGo is not intended for children under 13 and we do not knowingly collect their data. If you believe we have, email us and we will delete it.
Where your data is held
In the United States. If you are outside the US, using the service means your data is transferred there.
Changes
If we change this policy materially, we will email account holders and update the date above before the change takes effect.
Contact
support@eventticketgo.com
Sizzle LLC, d/b/a EventTicketGo
[postal address required — see src/lib/legal.ts]