Data & privacy

What we store and who can see it.

Every record belongs to exactly one club and is only readable within that club (platform admins excepted, for support and maintenance).
Membership card and ticket links are unguessable tokens and are excluded from search engines.
Check-in can only be performed by signed-in staff of the club that owns the ticket.
Inbound webhooks are authenticated with per-club or shared secrets.