Privacy notice
This is the pre-launch text for a demonstration build. It is accurate about what this software does today and must be replaced by the organiser's own before tickets are sold.
What is stored
An order stores the email address, name and optional phone number given at checkout, the tickets issued against it, and a payment record holding the card brand, the last four digits and the expiry. The full card number is never stored, never logged and never returned in an error.
A message sent through the contact form on the front page stores the name, email address and message text so the organiser can reply.
A contribution stores the amount and, only where the supporter asked to be named, the display name shown on the supporters wall. A contribution marked anonymous is counted in the total and is not named anywhere on the site.
What is not stored
There is no password anywhere in this product — signing in is a single-use link sent to an address, so there is no credential to lose. No analytics, advertising or tracking script is loaded: this site makes no request to a third party at all.
How long
A sign-in link expires after fifteen minutes and can be used once. A session cookie lasts thirty days. Order and ticket records are kept for as long as the organiser needs them for accounting, and are the organiser's to delete.
Asking for a copy or a deletion
Use the contact form on the front page. The organiser answers these; this software has no separate route for them.