Privacy Policy & Security Standards
Eventry respects your personal privacy. We collect only what is strictly necessary to issue authentic passes, process secure payments, and prevent event ticket fraud.
Data Captured During Platform Operations
When you use Eventry as an attendee, organiser, or gate staff, we collect the following limited operational data:
- Account Information: Your name, verified email address, optional phone number, and social profile identifiers (when using Google Sign-In).
- Ticketing & Orders: Order reference, ticket tier, quantity, gross and net financial totals, discount codes redeemed, and cryptographic pass hashes.
- Turnstile Check-In Logs: Exact timestamp, gate scanner identifier, and admission result when your QR code is scanned at venue gates.
- Payment Processing: We do NOT store payment card numbers, CVVs, or bank PINs. All payment transactions are tokenized and processed directly by our PCI-DSS certified partner, Paystack.
How We Protect Your Turnstile Passes
Every QR pass contains an HMAC signature derived from platform secrets and ticket metadata. This prevents malicious third parties from altering seat assignments, duplicating tickets, or forging admissions. Personal email addresses encoded in ticket payloads are cryptographically hashed and never exposed publicly.
Minimal, Purpose-Driven Browser Storage
We do not use invasive third-party tracking or advertising networks. We use only:
- Essential Session Cookies: To keep you authenticated securely and protect against CSRF attacks.
- Wishlist & Preferences: Anonymous session storage for wishlisted events before you log in.
- Theme & Notifications: Local storage flags for Dark/Light mode selection and desktop push alert opt-in status.
Data Control Under NDPR and Global Regulations
You have the right to request a certified copy of your order and ticket transaction dossier, modify profile information, or request account erasure subject to regulatory audit retention periods. For inquiries, lodge a request through our Support Desk.