HypedCrowds is a ticket platform for local bands and small venues. We collect the minimum information needed to run that platform, and we don't sell or rent your data to anyone. This page explains exactly what we keep, why, and what you can do about it.
What we collect
When you buy tickets
- Your name and email. So we can email you the tickets, and so the organizer knows who's coming.
- Payment details. Card data is collected and stored by Stripe, our payment processor. We see the last 4 digits, the brand, and a Stripe-issued payment ID — never the full card number.
- The events and tiers you bought. Tied to your account so you can find your tickets later.
When you create an account
- Email address (used to sign in).
- Optional name (shown on your tickets and to the organizer).
- If you set a password, we store a one-way hash — we can't read it.
- If you turn on two-factor authentication, we store an encrypted secret and one-time recovery codes.
Technical data
- IP address and user agent — used for fraud prevention, sign-in audit logs, and rate-limiting magic-link emails so someone can't spam your inbox with sign-in links.
- Session cookie — required to keep you signed in.
- Stripe's cookies — set by Stripe during checkout to detect fraud. See Stripe's privacy policy.
We do not use third-party tracking, advertising, or analytics cookies. We don't run Google Analytics, Facebook Pixel, or anything like that.
How we use it
- Process your ticket purchases and deliver your tickets.
- Sign you in and keep your session active.
- Send transactional emails (purchase confirmations, sign-in links, event reminders, refund notifications).
- Detect fraud and abuse.
- Comply with legal obligations.
How we share it
- Event organizers get the buyer's name and email for each ticket purchased on their event, so they can communicate about their event and validate at the door.
- Stripe processes payments and handles dispute / chargeback flow.
- Resend sends our transactional emails.
- DigitalOcean hosts the platform.
- Law enforcement when we receive a valid legal demand (e.g., subpoena).
We do not sell or rent personal data. We don't share it for advertising. We don't share it with anyone else outside the categories above.
How long we keep it
Account, ticket, and order data is kept while your account is active. After account deletion we retain transactional records for as long as required by tax and accounting law (typically 7 years in the US). Email logs roll off after 90 days.
Your rights
- Access. Sign in and visit your dashboard to see your orders and tickets.
- Correction. Update your name and email from your profile page.
- Deletion. Email support@hypedcrowds.com and we'll delete your account, subject to the retention schedule above for transactional records.
- Portability. We'll send you a machine-readable export of your data on request.
- Email opt-out. Transactional emails (purchase confirmations, sign-in links) can't be opted out of — they're required to use the platform. We don't send marketing email.
California, EU, and UK residents have additional rights under CCPA, GDPR, and UK GDPR respectively, including the right to lodge a complaint with a supervisory authority. We'll honor those rights regardless of where you live.
Children
HypedCrowds is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe we have, email support@hypedcrowds.com and we'll delete it.
Security
Passwords are hashed (bcrypt). Two-factor secrets are encrypted at rest. Payment data is handled entirely by Stripe (PCI-DSS compliant); we never see your full card number. The site is served over HTTPS only. We're a small team — if you find a security issue, please email support@hypedcrowds.com and we'll respond as fast as we can.
Changes to this policy
We'll update the effective date at the top when this policy changes. For material changes (anything affecting how we share or use data), we'll email registered users at least 30 days before the change takes effect.
Contact
Questions about your data? Email support@hypedcrowds.com.