Privacy
Effective 19 August 2026 · plain English, and it is the actual policy
The short version
We store your email and sign you in with a one-time link. There is no password.
Stripe takes the payment. We never see or store your card number.
You can delete your account yourself. Nothing is deleted for 30 days, and cancelling inside that window leaves the account exactly as it was.
What we collect
If you create an account, we store your email and sign you in with a one-time link — no password.
If you buy a ticket, Stripe processes the payment. We never see or store your card number. We keep the order record — amount, event, and buyer email.
If you upload an image — an event poster, an event cover, or your own profile photo — we store it and show it on the listing or profile you added it to.
If you add a photo to an event gallery, we store the photo, the credit you give it, and the account that added it.
If an organizer builds a run-of-show for their event, the travel and lodging details they enter are visible only to the organizer and the person named on their own private link — never public.
Who can see photos
Every event gallery on Socialpass is public. There is no private gallery and no ticket-holders-only gallery: if a photo has been published to a gallery, anyone with the link can open it, signed in or not.
To add a photo you have to be signed in, and you have to put a name on the credit — we show that credit under the photo. We don’t sell photos, licence them to anyone, or use them to train anything.
What we don’t do with photos
These are not settings, and no organizer can switch them on.
No face recognition. None, anywhere.
We don’t scan faces, we don’t build a face print of you, and there is nowhere to upload a picture of yourself to be matched against a gallery. A photo of four hundred people on a dance floor is four hundred people who never agreed to be measured — so we don’t measure them. You narrow a gallery by the day and the hour you were there instead.
No name tagging, and no “people” view.
There is no way to ask this product who is in a photograph, and nowhere to attach a name to a stranger’s face.
We don’t sell, licence or train on anyone’s pictures.
They belong to the person who took them. We host them for the event they were shot at, and nothing else.
No anonymous uploads.
A photo reaches a gallery one of two ways: through an upload link an organizer issued to one named person, or from someone signed in to a Socialpass account. Either way it carries a credit name we display, and we know which link or which account put it there — so there is always somebody accountable for it.
And the other half of it
None of that means you are hidden. A gallery is an ordinary public web page: anyone with the link can open it, signed in or not. So treat a photo in one as public — and ask for it to come down if it shouldn’t be.
Getting a photo removed
That covers every photo in an event gallery. An image elsewhere on the site — an event poster, a cover image, a profile photo — has no remove link on it, so that one is still an email to us, and a person handles it.
A photo that isn’t in an event gallery
Paste the link to the photo or the gallery, or describe it
Photographers and rights
A photo keeps the credit you give it. You supply a name when you add one — an Instagram handle too, if you want — and we display it with the photo. Adding a photo doesn’t hand us ownership of it: we show it on the event it belongs to, and we don’t licence it on to anyone.
If someone asks us to remove a photo you added, we remove it. We don’t make the person asking prove who they are, because making them prove it would defeat the point.
What we hold about a photo
Here is every record a gallery photo creates, and what happens to it.
The published photo
Resized on the way in, and stripped of its camera metadata — no GPS coordinates, no camera serial number. It stays in the gallery until an organizer hides it or somebody asks for it to come down.
When it was taken
The day and the hour — read from the photo’s own timestamp when it carries one, and taken as the upload time when it doesn’t. It is what the day and hour filters on a gallery are built from.
Who took it
The credit name, and the Instagram handle if one was given, stamped onto the photo at upload rather than looked up later — so the credit survives even if that contributor’s upload link is revoked afterwards.
The file you uploaded
Not kept. The original is turned into the two versions above and discarded in the same request — it never reaches storage, so there is no full-resolution copy of it here to ask about.
A removal you asked for
Which photo, and when. Your email address only if you chose to leave one — it is optional on the form, and the photo comes down whether or not you leave it.
If a photo has already left our hands
Someone may have downloaded or reposted it before you asked. We can take ours down; we cannot reach a copy on somebody else’s phone, and we will never claim otherwise. If a photo is being used against you off Socialpass, write to [email protected] and a person will read it.
Approximate location
We infer your city from your IP address, on our server, so we can show nearby events first. We never ask your browser for your device’s exact location — there is no location permission prompt anywhere on the site.
Analytics
We use Cloudflare Web Analytics for aggregate page-view counts. It is cookieless and doesn’t fingerprint your browser.
When you click out to an organizer’s Instagram or ticket page, we count that click in aggregate — no IP address, user agent, or per-visitor identity is stored.
Emails and unsubscribe
Transactional email — ticket confirmations, booking updates, and anything tied to something you did — is not optional; it’s how we deliver what you bought.
We send email about events you’re part of — tickets and bookings — plus anything an organizer you bought from sends through us. Every non-receipt email has one-click unsubscribe, and unsubscribing takes effect immediately.
Payments
Stripe processes every payment on Socialpass. We never see or store your card number. We keep the order record — amount, event, and buyer email — so you and the organizer both have a receipt.
Keeping and deleting
You can delete your account at any time from Account → Personal info → Delete my account. We’ll remove your saved events, follows, profile, and messages.
A request waits 30 days before it runs. Nothing is deleted inside that window, and cancelling before the date leaves your account exactly as it was.
A limited set of records survive deletion in a de-identified form — completed ticket orders, for financial record-keeping, and safety/abuse reports, so a report can’t be silently erased by the person it’s about.
If you manage an organizer or artist profile with upcoming events or an active payments account, you’ll need to transfer or wind it down first.
Contact
Questions about this policy or a request about your data: [email protected]. See also Terms.