Privacy notice

What we collect

• —Your phone number. It is your account — there is no password and no email required. It is how tickets reach you and how gate staff reach you if something goes wrong.
• —Your name, as it should appear on a ticket.
• —What you bought: the event, the ticket type, the amount, and the payment method used.
• —Whether and when a ticket was scanned at a gate, at which gate, and by which member of staff.
• —Technical records needed to keep the service working and to investigate abuse: the device your session was created from, and timestamps.

We do not store your card number or wallet PIN. Payment is completed with a licensed payment provider; we receive a reference and a result, never your credentials.

What the QR code on your ticket contains

A ticket identifier and a cryptographic signature over it. Nothing else — not your name, not your number, not your payment. Anyone who photographs your ticket learns nothing about you. It is also why a gate scanner can verify a ticket with no network connection.

Who sees what

• —The event organiser sees that you bought, what you bought, your name, and whether you attended. They need this to run the event and to handle refunds.
• —Gate staff see the name on the ticket and whether it is valid, at the moment they scan it.
• —Sponsors and advertisers receive no personal data. They see aggregate performance for their own placements only.
• —Platform administrators can see orders and payments in order to reconcile money and resolve disputes. Every such action is recorded in an audit log with the administrator named.
• —Payment providers receive the amount and a reference so they can process and settle the payment.

Messages you receive

Transactional messages — your ticket, a payment result, a cancellation, a change of venue — are part of the service and are sent whether or not you opt into anything else. Marketing is separate, requires opt-in, and every marketing message carries a one-tap way out. An organiser cannot message you once you have opted out.

How long we keep it

• —Your account and tickets: while your account exists.
• —Payment and settlement records: retained after account deletion for as long as financial and tax obligations require. We cannot delete the record that money moved.
• —Sign-in codes: minutes. They expire and are deleted automatically.
• —Sessions: expire automatically, and are revoked immediately when you sign out.

Your rights

• —Get a copy of your data in a readable format.
• —Correct your name or phone number.
• —Delete your account. Personal data goes; the financial record of a completed purchase stays, as above.
• —Opt out of marketing at any time without losing access to your tickets.
• —Object to how we handle your data, and be told what we did about it.

Ask through the contact route on this site. We will say what we did and when, not simply that we received the request.

Where your data lives

Data is stored with cloud providers outside The Gambia, because no local provider currently offers equivalent durability and security. That is a deliberate trade-off and it means your data crosses borders. Payment processing and settlement happen with a provider licensed by the Central Bank of The Gambia.

If something goes wrong

If we discover a breach affecting your data, we will tell you what happened, what it means for you, and what we have done — without waiting to be asked, and without minimising it.