It’s About The Fun

Privacy

What we collect, who else touches it, and how to get it back. Short, because the honest version is short.

Last updated October 2026

If you are an organizer

We hold what you gave us to run your account:

• your name, email and phone;
• your event and business details;
• your billing status and the Stripe identifiers for your subscription; and
• a record of significant actions in your account, so support questions can be answered.

We do not sell it, we do not rent it, and we do not use it to advertise to you on other platforms.

If you are a vendor or a buyer at an event

Your details (name, business name, email, phone, and what you bought) are held on behalf of the organizer running that event. They decide what to collect and why; we store it for them and keep it separated from every other organizer on the platform. If you want your details changed or removed, ask the organizer whose event you bought from. If you cannot reach them, tell us and we will help.

Card details never reach us. Payments are handled by Stripe on their own pages. We see the amount, the outcome and the last four digits, never the full number.

Who else processes it

• Supabase: the database and sign-in.
• Stripe: subscriptions, and each organizer’s own table payments.
• Vercel: hosting.
• Resend: email we send you: receipts, waitlist offers, sign-in codes, and announcements about shows you signed up to hear about.
• Cloudflare: the “are you human?” check on our contact form. It receives your IP address so it can make that judgement.

Each is used to run the service. None is given your data for their own purposes.

How we protect it

Everything travels over TLS. The payment credentials an organizer gives us (their own Stripe keys) are encrypted at rest with a key that lives only in our server environment, are never shown back in full, and are held in a table the browser cannot reach. Card numbers never touch our systems at all; Stripe handles them on its own pages.

Cookies

We use a session cookie so you stay signed in. We also store a random identifier in your browser so that one person clicking the same button twice is not counted as two people. It is not a cookie and it is not tied to your name or your account, but it does stay in your browser between visits, so we describe it as a random identifier rather than as anonymous. Clearing your browser storage removes it.

No advertising trackers and no third-party pixels. We do not sell or share your personal information, and nothing here is used for cross-context behavioural advertising.

We also record IP addresses briefly to rate-limit our own forms and APIs against abuse. Those entries are pruned automatically and are not used to build a profile of you.

Do Not Track

Some browsers send a “Do Not Track” signal. There is no agreed standard for how a site should answer one, so we do not respond to it differently. We treat every visitor the same way and do not track anyone across other companies’ websites, with or without the signal. We allow no third party to collect personal information about your activity across other sites while you are here.

Getting your data out, or deleted

Organizers can export their vendors, orders, payments and sign-ups from inside the product at any time, including after cancelling. If you want an account and its data deleted outright, ask us and we will do it, bearing in mind we may need to keep payment records for as long as tax and accounting rules require.

Your California privacy rights

We are a California business. If you are a California resident, the California Consumer Privacy Act gives you the right to know what personal information we hold about you and how we use it, to ask us to delete it, to ask us to correct it, and not to be treated differently for exercising those rights.

• What we collect: identifiers (name, email, phone, account name), commercial information (what was bought and when, billing status), and a small anonymous click identifier used only to count activity on our own pages. We collect it from you directly and from Stripe about payments you make.
• Why: to run your account and your events, to take and record payments, to send the receipts and notices the product sends, to answer support questions, and to keep the platform secure.
• We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months.
• To exercise a right, contact us from the email address on the account, or name the event you bought from. We will confirm it is you before acting, and respond within the time the law allows. You may also have someone act for you.

Children

The platform is for businesses and adults. It is not directed at anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe we have, tell us and we will delete it.

How long we keep things

For as long as the account is open, and afterwards only where there is a reason to: an unresolved payment, or a record we are required to retain.

Asking us something

Talk to us. A person reads it.