Privacy Policy

This Privacy Policy explains how FanSpot (“FanSpot,” “we,” “us,” or “our”) collects, uses, and shares information when you use the FanSpot website, applications, and services (the “Service”). By using the Service, you agree to the practices described here.

1. Information We Collect

• Account information — such as your name and email address when you create an account or sign in with a magic link.
• Transaction information — details about the tickets you buy or sell, including event, amount, order history, and the name you give at sign-in or checkout, which we keep on your account so the school can find your ticket at the gate. Payment card details are collected and processed directly by our payment processor, Stripe; we do not store full card numbers.
• Organizer information — details organizations provide to set up events, listings, and payouts.
• Usage & device information — basic, privacy-respecting analytics about how the Service is used, and technical data such as IP address and browser type, used to operate and secure the Service.

2. How We Use Information

• to provide, operate, and improve the Service;
• to process ticket purchases, admissions, and payouts;
• to send transactional messages such as sign-in links and order confirmations;
• to prevent fraud, enforce our terms, and keep the Service secure;
• to comply with legal obligations.

3. Payment Processing

Payments are processed by Stripe. When you make a purchase, your payment information is provided directly to Stripe and handled under Stripe’s privacy policy. FanSpot receives confirmation and limited transaction details but not your full card number.

4. Analytics & Cookies

We use two analytics tools to understand how the Service is used in aggregate: Plausible, which sets no cookies and does not track you across sites, and Google Analytics, which sets first-party cookies so it can tell returning visitors from new ones. We do not use Google's advertising features, and we never use analytics data to build advertising profiles or to show you ads. Beyond that, we use only the cookies necessary to keep you signed in and to operate core features such as your cart.

5. How We Share Information

• With Organizers — when you buy a ticket, we share the information the Organizer needs to fulfill and manage your order and admit you to the event.
• With service providers — such as our payment processor, hosting, email, and analytics providers, who process information on our behalf.
• For legal reasons — when required by law or to protect the rights, safety, and security of FanSpot, our users, or the public.

We do not sell your personal information, and we do not share it with anyone for cross-context behavioral advertising. We have never done either, so there is no sale or sharing to opt out of; if that ever changed, we would ask for your opt-in consent first, and we never sell or share the personal information of anyone under 16.

6. Students & Schools

FanSpot is used by K–12 schools and other educational organizations. You must be at least 13 to have a FanSpot account, and a person under 18 should use FanSpot with a parent's or guardian's permission. We do not knowingly collect personal information from children under 13; if we learn that we hold a child's information without a parent's consent, we delete it. The Service is intended to be used by adults (such as parents, staff, and community members) purchasing tickets to school events, and a school may issue tickets to its students without the student creating an account. Where we handle information on behalf of a school, we act as that school’s service provider and use the information only to provide the Service, consistent with applicable student-privacy laws. Where a school or district requires a student-data privacy agreement or specific vendor security standards, we work with them to meet those requirements. Schools with specific data-handling requirements should contact us.

7. Data Retention

We keep information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. We may retain de-identified or aggregated data that no longer identifies you.

8. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Choices & Rights

You may access or update your account information in your account settings, or request a copy of your personal information or that we delete your account, by contacting us; we will verify the request and answer within the time the law allows. Marketing email is opt-in and can be turned off in your account settings at any time. We honor Global Privacy Control signals from your browser as a request to opt out of any sale or sharing of your personal information — there is none today, and the signal makes sure there never is for you. Depending on where you live, you may have additional rights regarding your personal information, including the right not to be treated differently for exercising them; we will honor those rights as required by applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

11. Contact

Questions about this Privacy Policy? Contact us at [email protected].