Privacy notice — draft

We collect account names, emails, country, password hashes, event information, and purchase records to operate the service. Card details are handled by the configured payment processor and are not stored in our database. Session cookies are used for sign-in and security. QR ticket codes are unique and should be kept private.

Before public launch: Publish a reviewed policy covering retention, international transfers, user rights, support contacts, analytics, and applicable privacy laws.