Privacy Policy

1. Who we are

YardStubs is an event ticketing platform built to make sense. This policy explains how YardStubs, LLC, a Georgia legal liability corporation ("YardStubs," "we," "us") collects, uses, shares, and protects information when you use yardstubs.com, our ticket purchase and organizer tools, our emails, and any related services (together, the "Services").

This policy covers two kinds of people:

• Attendees — anyone who browses events, joins a waitlist, or buys a ticket, whether or not you create an account.
• Organizers — anyone who lists an event, sells tickets, or manages an event team on YardStubs.

It does not cover what an event organizer does with your information after we provide it to them. Once an organizer receives your information, they are acting as an independent business, and their own privacy practices apply. See Section 6.

2. What we collect

Information you give us

• Contact information — name, email address, and phone number when you buy a ticket, join a waitlist, create an account, or contact support. Guest checkout requires a name and email so we can send your ticket; it does not require an account.
• Account information — if you create an account, your login credentials and profile details. We store a cryptographic hash of your password, never the password itself.
• Organizer information — for organizers, your event details, ticket tiers and pricing, expense entries, co-organizer revenue splits, payout account connection (established through our payment processor), and the tax information the processor requires to pay you.
• Purchase information — what you bought, the quantity, the price, any promotional or access codes used, and your order history.
• Guest names — if an event requires a named guest list, the adult purchaser may enter the names of the people attending on their order. Where an attendee is a minor, that name is provided by the purchasing adult, not by the minor. We collect the guest's name only, never their contact details, age, school, or any other information about them.
• Communications — messages you send us, and your email preferences.

Information we collect automatically

• Device and usage data — IP address, browser type, device type, operating system, referring page, pages viewed, and timestamps.
• Cookies and similar technologies — see Section 9.
• Ticket and check-in data — your ticket's stub code and QR code, and if you attend, the time your ticket was scanned at the door.

Information we receive from others

• From our payment processor — confirmation that a payment succeeded or failed, the payment method type, the last four digits, and the card brand or bank name. We do not receive your full card number, bank account number, routing number, or banking login.
• From event organizers — if an organizer imports a guest list or attendee list you appear on.
• From advertising and analytics platforms — aggregate campaign performance and, where applicable, audience matching results.

3. How we use it

We do not use your personal information to train machine learning models, and we do not permit our vendors to use it to train theirs.

4. Payment information

This is the part people most want a straight answer on, so here it is.

Your card number and bank account number never touch our systems. When you pay, the payment fields are served and controlled by our payment processor, and your details go directly to them. When you pay by e-check or bank debit, you authenticate with your bank through a flow the processor hosts — your banking username and password are presented to your bank or the processor's regulated partner, never to YardStubs.

What we actually store is a token: an opaque identifier that is meaningless outside the processor's system and cannot be reversed into your account number. Alongside it we keep the last four digits and the card brand or bank name, so you can tell which payment method you used.

We have not applied for, and do not hold, permission to receive full bank account numbers.

Our payment processor handles your payment details under its own privacy policy and its own regulatory obligations as a payments company.

5. How we share it

We share personal information in the following circumstances, and no others.

Our service providers are contractually limited to using your information only to perform services for us. They may not use it for their own purposes, sell it, or keep it after our relationship ends.

We do not share or sell mobile phone numbers or SMS opt-in data with third parties or affiliates for their marketing purposes.

6. Event organizers

This deserves its own section because it surprises people.

When you buy a ticket, the organizer of that event receives your name, email address, ticket type, and order information. They need it to manage their guest list, check you in, contact ticket holders about changes, and handle refunds. There is no way to buy a ticket without the organizer receiving this — it is how events work.

Organizers may contact you about the event you bought into. If an organizer adds you to a general marketing list, that is their list and their responsibility, and you should use the unsubscribe link in their message or contact them directly.

Organizers agree in our terms to use attendee information only for legitimate event purposes, to comply with applicable privacy and anti-spam laws, and not to sell it. If you believe an organizer has misused your information, tell us at privacy@yardstubs.com — we take it seriously and can remove organizers from the platform.

For clarity: with respect to their own use of attendee data, organizers act as independent controllers of that information, not as our service providers.

7. Advertising and analytics

We use analytics to understand how the site is used, and advertising pixels from Meta, Google, and TikTok to measure our campaigns and show YardStubs ads to people who have visited us.

These technologies may share information with those platforms — typically your device identifier, IP address, browser and device details, the pages you viewed, the fact that you joined our waitlist, and in some cases a hashed version of your email address for audience matching. Each platform handles that information under its own privacy policy, and may use cookies of its own.

If you opt out in Section 8, or your browser sends a Global Privacy Control signal, these three services do not load on our site at all, so they receive nothing from your visit.

You can turn this off at any time in Section 8.

No advertising trackers on youth events

Some events on YardStubs are aimed at high school or middle school students. We only run advertising or retargeting pixels on the listing page and checkout for events the organizer has marked as 18+. Every organizer must answer whether their event is 18+ when they list it, and for any event that is not — including all-ages events — our system suppresses all advertising tags on those pages automatically. We also do not build advertising audiences from anyone we know to be under 18.

This is a technical control, not just a promise — the tags are prevented from loading rather than asked not to fire.

We do not sell or share the personal information of anyone we know to be under 18.

8. Your privacy choices: opt out of advertising sharing

You can opt out of the advertising-related sharing described above. This applies to you regardless of what state you live in — we do not check your residency before honoring it.

Global Privacy Control

We recognize and honor the Global Privacy Control (GPC), a browser-level signal that tells every site you visit not to sell or share your information. If your browser sends a GPC signal, we treat it as a valid opt-out automatically. You do not need to use the control above as well.

Authorized agents

You may designate an authorized agent to submit an opt-out request for you. We will ask for written proof of their authorization, and we may ask you to verify your identity directly.

9. Cookies and similar technologies

Most browsers let you block or delete cookies in their settings. Blocking strictly necessary cookies will break checkout.

10. Your privacy rights

State privacy laws in the United States differ, and which ones apply to you depends on where you live. Rather than sort you by state, we extend the following rights to everyone who uses YardStubs:

• Know and access — ask what personal information we have about you, where we got it, why we have it, and who we have disclosed it to. You can request a portable copy.
• Correct — ask us to fix personal information that is inaccurate.
• Delete — ask us to delete your personal information. We may keep what we are legally required to keep, such as transaction records for tax purposes, and we will tell you if that applies.
• Opt out of advertising-related sharing — see Section 8.
• Opt out of marketing email — unsubscribe from any marketing message, or email us.
• Non-discrimination — we will not deny you service, charge you more, or give you a worse experience because you exercised a privacy right.
• Appeal — if we deny your request, you may appeal by replying to our decision. We will respond to appeals in writing within 45 days with our reasoning, and tell you how to contact your state attorney general if you disagree.

How to make a request

Email privacy@yardstubs.com with the subject line "Privacy Request," or write to us at the address in Section 17. Tell us which right you are exercising.

We will verify your identity before acting — usually by confirming you control the email address associated with your orders, and sometimes by asking about a recent order. This protects you: without verification, anyone could request deletion of your account. We will respond within 45 days, and may extend once by another 45 days if your request is complex, in which case we will tell you before the first period runs out.

There is no charge for a reasonable request. We may charge or decline if a request is manifestly unfounded or excessive, and we will explain why if so.

Sensitive personal information

We do not collect or process sensitive personal information as those laws define it, so there is nothing for you to limit. If that ever changes, we will update this policy and provide the required control before we start.

11. California disclosures

This section provides the specific disclosures the California Consumer Privacy Act requires, using its statutory categories. We provide it for the benefit of all users, not only California residents.

We do not knowingly sell or share the personal information of consumers under 16 years of age. Transacting with YardStubs is restricted to adults 18 and over, and advertising tags are suppressed on youth events — see Section 14.

Guest names supplied by an adult purchaser fall within the Identifiers and Customer records categories above. They are disclosed only to that event's organizer for check-in, are never sold or shared for advertising, and are deleted 90 days after the event.

Sources of personal information, purposes for collection, and retention periods are described in Sections 2, 3, and 12.

Shine the Light. California Civil Code § 1798.83 permits California residents to request information about disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

12. How long we keep it

13. Security

We maintain a written information security program with administrative, technical, and physical safeguards. In practical terms:

• All data is encrypted in transit (TLS 1.2 or higher) and at rest.
• Access to systems holding your information requires multi-factor authentication and is limited to people who need it, with access reviewed regularly.
• The most sensitive data — your card and bank account numbers — is architecturally excluded: our systems are built so that those values never enter them at all. A system that does not hold something cannot leak it.
• Database-level access rules restrict every record to the people entitled to see it, rather than relying on application code to filter.
• We maintain a written incident response plan and will notify you and the appropriate regulators as required by law if a breach affects your information.

No system is perfectly secure, and we will not tell you otherwise. If you believe your account has been compromised, contact us immediately at security@yardstubs.com.

If you are a security researcher and have found a vulnerability, we want to hear from you at the same address. We will not pursue legal action against researchers who report issues in good faith and give us reasonable time to fix them.

14. Minors and youth events

Some events on YardStubs are for younger students — high school showcases, middle school step shows, youth sports. Minors are welcome at those events. What follows is how we handle their information, and the short version is that we are built so that we collect information from adults, not from children.

You must be 18 to transact with us

You must be at least 18 years old to create a YardStubs account, buy a ticket, list an event, or receive a payout. This is a firm requirement, not a formality. If a minor is attending an event, an adult buys the ticket and the minor attends on that adult's order.

We do not knowingly permit anyone under 18 to create an account or make a purchase. If we learn that a minor has done so, we will close the account and delete the associated personal information.

What we collect about minors, and what we don't

When an adult buys tickets for a group that includes minors, and the event requires a named guest list, we receive the minor's name and nothing else. We do not collect or ask for a minor's email address, phone number, date of birth, age, school, photograph, or any other identifier.

A guest name provided this way is used for one purpose: letting the organizer check that person in at the door. It is not used for marketing, not used for advertising, not used to build a profile, and not shared with anyone other than that event's organizer.

Minors do not interact with our systems directly. There is no account for them, no login, and no profile.

Children under 13 and COPPA

The Children's Online Privacy Protection Act ("COPPA") governs the online collection of personal information from children under 13. YardStubs is not directed to children under 13, and we do not knowingly collect personal information online from children under 13. Our design is the reason we can say that: the transacting party is always an adult, and where a child's name appears on a guest list, it was supplied by their parent, guardian, or another responsible adult — not collected from the child.

If we learn that we have collected personal information directly from a child under 13 in a manner COPPA covers, we will delete it promptly.

No advertising to minors

We do not serve targeted advertising to minors, do not build advertising audiences from anyone we know to be under 18, and do not sell or share the personal information of anyone we know to be under 16. As described in Section 7, advertising and retargeting tags are technically suppressed on any event not marked 18+.

Parents and guardians

If you are a parent or legal guardian and you believe we hold information about your child, you may:

• Ask what we have. We will tell you what information associated with your child is in our systems and where it came from.
• Ask us to delete it. We will delete it, and we will not condition your child's attendance at an event on your allowing us to keep it.
• Ask us to stop collecting it. You can tell us not to accept further guest-list entries naming your child.

Email privacy@yardstubs.com with the subject line "Parental Request." We will verify that you are the parent or guardian before acting, and we will respond within 30 days — faster than the 45-day standard we apply to adult requests, because requests about children should not wait.

What organizers of youth events must do

Organizers who list youth events agree in our terms to flag the event as such, to collect no more information about minor attendees than the event genuinely requires, not to market to minors, and to comply with COPPA and applicable state minor-protection laws in their own use of any attendee information we provide. If you believe an organizer has misused a minor's information, tell us at privacy@yardstubs.com. We remove organizers for this.

15. Where we operate

YardStubs is operated from the United States and intended for users in the United States. Our service providers process information in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S., where privacy laws may differ from those where you live.

We do not currently offer the Services to individuals in the European Economic Area, the United Kingdom, or Switzerland, and this policy does not attempt to satisfy the GDPR.

16. Changes to this policy

We will update this policy as the Services change. When we do, we will revise the "Last updated" date at the top.

If we make a material change — for example, if we begin collecting a new category of information, or use your information for a materially different purpose — we will give you notice before it takes effect, by email or a prominent notice on the site, and where the law requires it, we will ask for your consent.

We will not apply a material change retroactively to information we already collected without telling you.

17. Contact us

Questions, requests, or concerns about privacy — we read every one.