Personal data
Privacy policy
Last updated: 16 August 2026
Data we process
When you register, sign in or order, we process your name, email address, selected ticket, payment status and Stripe identifiers, and limited technical information required to prevent abuse. Card details are entered in Stripe's interface and do not pass through Tiketko. Passwords, session tokens and verification tokens are stored only in hashed form.
How we use the data
We use the data to provide the requested service: email verification, test or real payment according to the clearly displayed mode, PDF issuance and delivery, account history, verification of valid admission tickets, abuse prevention and compliance with applicable legal obligations.
Service providers
Stripe provides the test or enabled payment interface, Resend delivers transactional email, and private S3/R2 storage holds PDF files. Hosting and database infrastructure are operated by infrastructure providers. Each provider receives only the data required for its function.
Storage and access
Ticket access is restricted to the verified owner and an authorized organizer. Sessions expire after no more than 14 days and verification links after 30 minutes. Order, ticket and audit records are retained for as long as needed to operate the event, maintain security and records, and meet applicable legal obligations.
Your rights
You may request access, correction or deletion of your personal data where applicable law permits. Some records may be retained for security and legal obligations.