How your info is handled

• Your email is used only to complete this ticket handoff.
• Claimers: your email is shared with the giver so they can transfer the tickets.
• Emails are stored encrypted and deleted once the tickets are sent (or the listing ends).
• To enforce the 2-claims-per-2-weeks limit, we keep only a scrambled ID, the event type, ticket count and date, and delete it after 14 days.
• After the giver marks the tickets sent, we email the claimer a one-time "Did you get your tickets?" link and then delete the claimer's email. Only a scrambled link token is kept.
• Givers have a private reputation (completed handoffs and yes/no answers) stored under a scrambled ID, never shown publicly, and deleted after 1 year of inactivity. Repeated "No" answers pause listing privileges.
• If you turn on app notifications, we store that device's push address encrypted, linked only to your listing or claim, and delete it as soon as the listing or claim finishes. Notifications never include email addresses.
• We keep only anonymous totals of tickets and events given away.
• We never sell or share info otherwise.

Details

• Emails are encrypted (AES-256) while they're needed and deleted when the giver marks the tickets sent, the hold expires, or the listing ends.
• Exclusion lists, rate-limit records and the claim-limit ID are stored only as keyed one-way hashes (HMAC), never as plain emails or IP addresses.
• Claim-limit records (scrambled ID, event type, ticket count, date) are deleted after 14 days.
• We keep anonymous monthly totals only: tickets given, events, and claims by event type.
• After the giver marks your tickets sent, we email you a one-time "Did you get your tickets?" link (valid until 24 hours after the event) and then immediately delete your email. We keep only a scrambled version of that link, linked to the listing and the giver's scrambled ID.
• Givers have a private reputation (handoffs completed, yes/no answers, dates) stored under a scrambled ID (HMAC) of their email. It is never shown publicly and is deleted after 1 year of inactivity. Repeated "No" answers pause a giver's listing privileges.
• Reports: we store the reason, your optional note and a scrambled ID of your IP address (used to count distinct reporters and limit abuse). Resolved reports are deleted after 30 days.
• App notifications (optional): if you tap "Turn on notifications", your browser gives us a push address for that device. We store it encrypted (AES-256), linked only to your listing (givers) or claim (claimers) by a scrambled ID, and delete it as soon as the claim is marked sent, released, cancelled or expired, or the listing finishes (at most 3 days). Notification text never includes email addresses. You can turn notifications off any time on the same page or in your device settings.
• Bot protection is provided by Cloudflare Turnstile.
• Autocomplete suggestions on the Give form come only from public details of verified listings (event name, venue, city, state/region) plus a built-in list of US states and Canadian provinces. What you type is not stored; suggestion requests are rate-limited with a scrambled ID.

Links to ticket sellers

The "Buy on" links to ticket sellers (such as Ticketmaster or SeatGeek) are ordinary links to help you find more seats. They are not affiliate links, and TicketTables earns nothing if you buy through them. If that ever changes, this page will say so and those links will be labeled. Free tickets on TicketTables are never affected.