Privacy

This notice describes how Ticket'n'Tickets (ticketandtickets.com, and the Ticket'n'Tickets iOS and Android apps) processes personal data when you browse, create an account, buy a ticket for a real-world event, or scan tickets at a gate. For a specific event, the organiser may also be a controller of buyer and ticket data. The signed Legal Package prevails if it differs from this page.

Data we process

• Account data: email, password (stored by the auth provider, not by us in plain text), name, phone, country, city, and session cookies.
• When you create an account you confirm you are at least 15. We store that confirmation, not an identity document.
• Orders: email, name, ticket quantities, amounts, and Stripe payment references. Card numbers are entered on Stripe, not on Ticket'n'Tickets.
• Tickets already issued: holder name printed on the ticket, QR secret, and check-in time.
• Staff devices: camera frames used only to read a ticket QR at the gate. We do not store a photo library.
• Technical logs: IP address and user agent, used for security and rate limits.
• Optional marketing cookies (Google Tag Manager, Meta pixel, or ads) only after you choose Accept all. Session replay tools are blocked.

Purpose & legal bases

We process data to perform the ticket contract, to keep accounts and prevent fraud (legitimate interests and legal obligation), and — only if you opt in — for marketing measurement. The apps do not sell digital goods; checkout pays for admission to a real-world event.

Retention

Account profile data is kept while the account exists. Paid order totals, ticket records, and payment references are kept for accounting and so issued tickets stay valid. When you delete your account we remove the login and profile, clear your name and email from orders, and keep the financial and ticket rows.

Your rights

You can access and correct your profile under Account. You can delete a buyer account in the app or on the web at Account → Security (type DELETE). You can withdraw marketing cookies on this page. Other requests: security@ticketandtickets.com. Staff, owner, and admin accounts are deleted by support so venue and payout records are not destroyed by mistake.

Delete your account

Signed-in buyers: open Account, then Security, and use Delete account. The same page is what the iOS and Android apps show, because those apps load the website account screens. This is the in-app deletion path required by the App Store and Google Play.

Cookies

Essential cookies are always on: sign-in session and language (tnt_ui_lang). Marketing cookies and tags stay off until you tap Accept all. This product does not include session replay (no keystroke or screen recording). You can switch back to essential cookies with the buttons below; the page reloads so tags stop.

Processors

Hosting: Vercel. Database and accounts: Supabase. Card payments: Stripe. Email, when enabled: Resend. Maps, when a venue map is shown: Google Maps. Fonts are served from this site, not from Google Fonts. Marketing tags, only after consent: Google (Tag Manager / AdSense) and Meta. Each processor’s own terms describe their regions and safeguards.

International transfers

Vercel, Supabase, and Stripe may process data outside your country. Where required, transfers use the safeguards those providers publish (such as standard contractual clauses).