Privacy Policy

ScareTicket, LLC (“ScareTicket,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use our websites, ticketing checkout, digital tickets, order tools, and related services (the “Services”), including https://scareticket.com.

ScareTicket is a ticketing facilitator. We provide technology to help you purchase admission from independent event organizers (“Organizers”). We do not produce or run events. When you buy tickets, the Organizer also receives information needed to fulfill your order; the Organizer’s own privacy practices apply to their use of that information.

This policy does not apply to third-party websites or services you access through links on our site.

Last updated: June 2, 2026.

Information We Collect

We collect information you provide directly, information collected automatically, and information from service providers as described below.

Information You Provide

• Orders and tickets: name, email address, phone number (if requested), billing details, order contents, time slots or admission types, attendee or holder names (including names you enter when sharing a ticket), and discount or promotional codes applied;
• Support: information you submit through support forms, email, or other communications (including attachments);
• Other: any additional information you choose to provide when using the Services.

Payment Information

Payments are processed by third parties such as Stripe. We do not store full payment card numbers on our systems. Stripe collects and processes payment data according to its own privacy policy and PCI obligations. We may receive limited payment-related information (for example, last four digits, card brand, transaction status, and billing postal code) to complete and support your order.

Automatically Collected Information

• Log and device data: IP address, browser type and version, operating system, pages viewed, referring URLs, dates and times of access, and similar technical data;
• Error and security data: diagnostic information when errors or suspected abuse occur;
• Analytics: aggregate usage data via Fathom (see Cookie Policy).

Some automatically collected data may not identify you alone but may become identifiable when combined with other information.

Ticket Sharing

If you create a ticket share link, you may provide another person’s name to display on the ticket. Anyone with the link may be able to access that ticket. Share links may not be revocable once created. Only share with people you trust.

How We Use Information

We use personal information to:

• process transactions and facilitate purchases between you and Organizers;
• deliver tickets, confirmations, and service-related messages;
• provide customer support and respond to inquiries;
• prevent fraud, abuse, and security incidents;
• operate, maintain, and improve the Services;
• comply with legal obligations and enforce our Terms of Service;
• send marketing communications only where permitted by law and with appropriate choices (you may opt out of marketing as described below).

We process information only where we have a valid legal basis, including to perform our contract with you, for our legitimate interests in operating a secure ticketing platform, with your consent where required, or to comply with law.

How We Share Information

We may share personal information with:

• Organizers for events you purchase, so they can admit you, communicate about the event, and apply their policies;
• Service providers who help us operate the Services, including:
  • Stripe (payments);
  • Postmark (transactional email);
  • Fathom (analytics);
  • Front (support requests submitted through our forms);
  • Instatus (service status displays);
  • hosting, infrastructure, and security vendors.
• Professional advisors (lawyers, accountants) under confidentiality obligations;
• Authorities when required by law or to protect rights, safety, and security;
• Successors in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information for money. We do not share personal information with Organizers for their unrelated marketing unless you have opted in to such communications from them or as otherwise permitted by law.

Our Role Under Privacy Laws

For platform operations (security, support, analytics, and operating the Services), ScareTicket generally acts as a data controller (or “business” under U.S. state privacy laws).

For attendee information we process solely to fulfill an Organizer’s event on their instructions, we act as a data processor (or “service provider”) to that Organizer. Organizers are responsible for their event-related privacy practices and for responding to certain requests regarding their use of your data. Contact the Organizer first for event-specific privacy questions; we will assist as required by law and our agreements with Organizers.

Retention

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including:

• Orders and tickets: for the life of the order and a period afterward for support, dispute resolution, fraud prevention, and legal, tax, and accounting requirements (often several years where required by law);
• Support inquiries: while the matter is open and for a reasonable period afterward;
• Logs and analytics: for shorter periods appropriate to security and operations.

When retention is no longer required, we delete or de-identify information where feasible.

Security

We use commercially reasonable safeguards designed to protect personal information. No method of transmission or storage is completely secure. Payment card data is handled by Stripe, not stored by us in full form.

Children’s Privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will take appropriate steps to delete it. Parents or guardians may purchase tickets for minors; Organizer age rules still apply at the event.

Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, or to receive a portable copy. You may also withdraw consent where processing is consent-based.

To exercise rights relating to ScareTicket’s processing, contact help@scareticket.com. We may need to verify your identity. We will not discriminate against you for exercising applicable privacy rights.

Transactional email: you cannot opt out of essential messages about your orders (for example, confirmations and ticket delivery).

Marketing: if we send optional marketing email, you may opt out using the unsubscribe link or by emailing us.

Organizer requests: for access, correction, or deletion of information held primarily by an Organizer for their event, contact that Organizer. We will cooperate as required by law.

Data breaches: we will notify you and regulators as required by applicable law.

International Transfers

We are based in the United States. Personal information may be processed in the U.S. and other countries where we or our service providers operate. Those countries may have different data protection laws than your country. Where required, we use appropriate safeguards for transfers (such as standard contractual clauses).

Cookies

We use cookies and similar technologies as described in our Cookie Policy.

Business Transfers

If we undergo a merger, acquisition, or asset sale, personal information may transfer to the successor, who must honor commitments consistent with this policy or obtain your consent where required.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post changes on this page and update the “Last updated” date. Where required by law, we will provide additional notice or obtain consent for material new uses of personal information.

Additional Disclosures for European Economic Area, UK, and Switzerland (GDPR)

Controller contact: ScareTicket, LLC — contact details in the Contact Us section below.

Legal bases: contract (processing purchases), legitimate interests (security, analytics, improving Services), consent (where required, such as certain marketing), and legal obligation.

EEA transfers: where personal information is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or other lawful mechanisms.

Your GDPR rights include access, rectification, erasure, restriction, objection, portability, and lodging a complaint with a supervisory authority. Contact us to exercise these rights. Deletion requests may be limited where we must retain order records for legal or contractual reasons.

Additional Disclosures for U.S. State Privacy Laws

California (CCPA/CPRA)

In the past 12 months, we may have collected these categories of personal information:

• Identifiers (name, email, IP address, account or order identifiers);
• Customer records (billing address, limited payment information via Stripe);
• Commercial information (purchase history, tickets, codes used);
• Internet or network activity (log and analytics data);
• Other information you provide (support messages, ticket holder names).

We use these categories for the business purposes described above. We do not sell personal information. We do not use sensitive personal information for inferring characteristics.

California residents may request to know, delete, or correct personal information, and to limit certain uses of sensitive personal information where applicable. Submit requests to help@scareticket.com with “California Privacy Request” in the subject line. We will verify your request as required by law.

We do not respond to browser “Do Not Track” signals. We may offer financial incentives (such as discount codes) only as permitted by law and Organizer rules; participation requires opt-in where required.

Under California Civil Code § 1798.83, California residents may request information about certain disclosures to third parties for their direct marketing. We do not broadly share personal information with third parties for their independent direct marketing; contact us if you have questions.

Connecticut and Other State Laws

Residents of Connecticut and other states with comprehensive privacy laws may have similar rights to access, delete, correct, and opt out of certain processing. Contact us to exercise applicable rights. Where we act as a processor for an Organizer, we will direct you to the Organizer when appropriate.

Additional Disclosures for Australia

If Australian privacy law applies solely to a disclosure, you acknowledge some overseas recipients may not be subject to the Australian Privacy Act and you may not be able to seek redress under that Act against them.

Contact Us

For privacy questions or requests:

ScareTicket, LLC
Email: help@scareticket.com
https://scareticket.com/contact