Updated 14 November 2026
Privacy
What we collect, why, and what you can ask us to do with it.
Who we are
Year in Tickets (yearin.app) is run by an independent UK seller. We decide how your personal data is used, which makes us its controller under UK data protection law. We're registered with the Information Commissioner's Office, registration number ZC296463. Questions or requests: hello@yearin.app.
What we collect
- Your events. The gigs, matches and shows you add: name, venue, city, date and seat. If you aren't signed in, they stay in your browser and never reach us until you order.
- Your account. Your email address, and the name and phone number you give us. You sign in with a link sent by email, so there's no password to store.
- Forwarded emails and uploads. Booking emails you send to your forwarding address, and ticket photos, PDFs and screenshots you upload. We read them to find your events, then keep only the events. We don't store the emails or files themselves.
- Orders. What you ordered, the design, the delivery address (which may be someone else's if it's a gift), your email and phone number, any code you used, and how you heard about us if you tell us. Card details go straight to Stripe; we never see them.
- Gift vouchers. Your name and email, the recipient's name, their email if you ask us to send it to them, the send date and your message.
- Your marketing choice, and when you made it.
- Waiting list. Your email address and when you gave it, if you ask to hear when we open.
Why we use it
- To make and deliver what you order, run your account, and send order, delivery and voucher emails. We need this to do what you've asked (contract).
- To keep records of sales for tax and accounting (legal obligation).
- To prevent fraud, fix problems and see which posts and groups bring orders, and to spot repeat customers (legitimate interests: running a small business sensibly, in ways you'd expect).
- To see how people find and use the site with Google Analytics, only if you say yes to its cookies (consent).
- To email you about new designs and offers, only if you tick the box (consent). Untick it on your account page, or email us, and we stop.
- To tell you when we open, if you join the waiting list (consent). One email, nothing else.
We don't sell your data, and we don't use it for advertising or profiling.
Who we share it with
Only the services we need to run the site, each bound to use your data only for us:
- Prodigi prints and posts your order. They get the print file, the delivery name and address, and a phone number for the courier.
- Stripe takes payments and screens them for fraud.
- Anthropic (Claude) reads forwarded emails and uploads to find the events in them. Anthropic doesn't use this to train its models.
- Supabase stores accounts, events and orders.
- Resend sends our emails and receives the emails you forward. It may hold a forwarded email for a short time after we've read it.
- Vercel hosts the site, in London.
- Google runs Google Analytics, if you say yes to its cookies. It sees the pages you visit, how you arrived and roughly where you are, but not who you are.
- Delivery companies (such as Royal Mail, Evri or DPD) get what's on the parcel label.
Some of these companies are based in, or use servers in, the United States. Where your data leaves the UK, it is protected by the UK–US data bridge or the UK's approved contract clauses. We'll also share data if the law requires it.
How long we keep it
- Events and account details: until you delete them or ask us to close your account.
- Orders and voucher records, including addresses: six years after the sale, for tax records.
- Gift vouchers last 2 years; we keep the record for six years after it's bought.
- Your marketing choice: as long as we hold your email, so we can show when you agreed or said no.
- Waiting list emails: until we've sent the opening email, then we delete them.
Cookies and storage
The site needs a cookie that keeps you signed in, your design (and any promo code from a link you followed) kept in your browser's storage, and Stripe's cookies on the checkout pages, which help stop fraud. We count page visits with Vercel Web Analytics, which uses no cookies and can't identify you.
If you say yes when we ask, we also use Google Analytics cookies to see how people find the site and which pages they use, so we know which posts and groups are worth our time. Google Analytics doesn't load at all until you say yes. We've turned off its advertising features, and we never send it your name, email or order details. It keeps the data for 14 months. Your choice is saved in your browser, and you can change it here at any time:
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to how we use it or ask us to limit it, and ask for it in a format you can take elsewhere. Email hello@yearin.app; we'll reply within a month. We may need to keep order records for tax even after closing an account.
If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk.
Children
The site isn't meant for children under 13, and you must be 18 or over to order.
Changes
If we change this policy, we'll update the date at the top, and email you about anything important.