Privacy Policy

1. Who this covers

This policy covers TheNetTicket, operated by TheNetVR. It applies to Buyers, to the people who run Venues and their staff, and to anyone who visits the site. Each Venue is a separate business with its own responsibilities for the buyer information it receives; this policy describes ours.

2. What we collect

When you buy a ticket

• Email address: required. It is where your tickets go and how they are recovered.
• Name: optional, if you or the door staff enter one.
• Order details: the event, entry time, ticket types, quantities, prices, and the time of purchase.
• Payment result: whether the card payment succeeded, and Stripe's reference for it. We never receive your card number; it goes directly to Stripe.
• Scan events: when and at which device your ticket was scanned, and the result.

When you run a venue

• Account details: your email address and name, held by our sign-in provider, Clerk.
• Venue details: the name, web address, events, prices and entry times you publish.
• Payout details: collected by Stripe directly during onboarding. We hold only your Stripe account identifier and whether it can accept payments.

From everyone

• Technical logs: IP address, browser type, the pages requested and any errors, kept briefly for security and reliability.

3. How we use it

• To sell, deliver and validate tickets.
• To email you your tickets, and a notice if they are refunded or cancelled.
• To let the Venue admit you at the door and see who has bought tickets to its own events.
• To prevent fraud, duplicate admissions and abuse.
• To answer support requests and to comply with the law.

We do not sell personal information, we do not use it for advertising, and we do not send marketing email. The only emails you receive from us are about tickets you hold.

4. Who sees it

• The Venue you bought from. It is the seller, and it sees your email address, name if given, and order details for its own events, as any ticket seller would. It does not see other venues' buyers.
• Stripe processes payments and refunds and holds venues' payout details, under Stripe's privacy policy.
• Clerk provides sign-in for venue accounts, under Clerk's privacy policy. Buyers do not have accounts and are not sent to Clerk.
• Amazon Web Services hosts the service and sends its email (Amazon SES). Data is stored in the United States.
• Authorities, where the law requires it.

We share nothing else with anyone else.

5. Cookies

Buying a ticket sets no tracking cookies. Venue sign-in uses a session cookie from Clerk so you stay signed in; it is essential to the service and not used to track you across other sites. The gate scanner stores tickets and keys on the device it runs on so it can work without a signal; that storage never leaves the device except to sync scan results back to us.

6. How long we keep it

• Orders and tickets are kept for as long as the Venue needs them for its records and for the tax and consumer-protection periods that apply to sales, then deleted or anonymised.
• Scan records are kept with the order they belong to.
• Technical logs are kept for up to thirty days.
• Venue accounts are kept while the account is open and for a reasonable period after it closes.

7. Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it, by emailing mike@thenetvr.com. We will answer within thirty days. We may keep what the law requires us to keep (typically the financial record of a sale), and we will tell you if so. Depending on where you live you may have further rights under laws such as the California Consumer Privacy Act or the GDPR, including the right to complain to a regulator; we honour those rights for everyone, wherever they live.

8. Security

Everything travels over encrypted connections. Tickets are cryptographically signed so they cannot be forged, and each admits once. Access to buyer data is limited to the Venue that made the sale and to the Operator's staff who need it to run the service. No system is perfectly secure, and if a breach affects you we will tell you.

9. Children

The service is not directed at children under 13 and we do not knowingly collect information from them. A parent or guardian who believes a child has provided information can have it removed by contacting us.

10. Changes

We may update this policy; the effective date at the top says when. If a change materially affects how we use information we already hold, we will say so on this page and, where we can, by email.

11. Contact

mike@thenetvr.com