Privacy policy

TicketDay is built to collect as little as possible. This policy explains what we do collect, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).

Who we are

TicketDay is an independent UK event discovery website with a separate Glastonbury ticket-practice simulator. We are the data controller for the information described here. Contact us about anything in this policy at [email protected].

What we don't collect

• Anything you type into the simulator: practice names, registration numbers, postcodes, billing details and practice card details stay in your browser and are never sent to us or anyone else.
• Real festival registration details or real card details. Please never enter them into the simulator.

What we collect, why, and for how long

• Sale alerts. If you sign up for alerts we store your email address, the page you signed up on and the date. We use it only to email you about upcoming ticket sales and TicketDay practice. Legal basis: your consent. We keep it until you unsubscribe, using the link in every email, or ask us to delete it.
• Your account. If you create an account we store your email address, the username and optional name you choose, when you joined and when you last signed in. Your username and name are public on your profile; your email address is never shown. Sets you log (your rating, review, the rough time, any YouTube link and the date you logged it) are public on the set page and your profile, under your username. To sign you in we email you a one-time link and set a cookie that keeps you signed in for up to a year. Legal basis: performing our contract with you. We keep your account until you delete it, which you can do yourself at any time from your account page; deleting it removes it straight away.
• Purchases. When you pay £1.99, payment is handled by Stripe on its own secure checkout page. We never see your full card number. Stripe tells us your email address, the last 4 digits of your card and the amount paid. We use these to give you access and let you restore it. Legal basis: performing our contract with you. We keep purchase records for 6 years to meet UK tax and accounting rules.
• Anonymous usage events. We count steps such as "queue started" or "simulation completed", with details like group size, difficulty, device type (mobile, tablet or desktop) and times taken. These use a random ID held in your browser tab's session storage. They aren't linked to you or your purchase and contain nothing you typed. Legal basis: our legitimate interest in understanding and improving the service. We keep them for up to 13 months.
• Event searches. When you search for events we record the filters you chose (dates, genre, city, price, distance), how many results came back, and your starting point reduced to a postcode district or town, such as "WA1" or "Warrington". If you type a full postcode, it is shortened to its district before it is used or stored. We also count views of event pages and clicks on ticket links. None of this is linked to you. Legal basis: our legitimate interest in improving the service. We keep searches for up to 13 months. Page view and ticket click counts identify nobody, so we keep them. To spot automated traffic, each ticket click is also logged with your browser's user agent and a scrambled form of your IP address that changes every day; we keep those logs for up to 13 months.
• Your music and remembered location. If you save favourite artists or genres, we keep them in local storage and a first-party cookie on your browser. Your browser sends that cookie, and a cookie containing your last searched postcode district or town, to TicketDay so our server can put matching events first. These preferences are not saved to a TicketDay account or kept in our database. Legal basis: our legitimate interest in providing the personalised discovery you request. These cookies last up to one year; local storage stays until you remove the preferences or clear your browser data. You can remove your music preferences under "Your music" and delete location storage in your browser. See our cookie policy.
• Google Analytics, only if you accept analytics cookies. See our cookie policy.
• Server logs. Our web server keeps technical logs, including IP addresses, for security and troubleshooting, and deletes them once they're no longer needed for that. Legal basis: legitimate interest in keeping the service secure.
• Emails you send us are kept for as long as needed to deal with your message, and no longer than 2 years.
• Your practice scores are stored only in your browser.

Who we share it with

We never sell your data or share it for marketing. We use a small number of service providers who process data for us under contract:

• Stripe for payments (Stripe's privacy policy).
• An email delivery provider to send sale alerts and sign-in links.
• YouTube (Google), only when you press play on a clip someone added to a set. Until then we show a still image loaded from YouTube's image server, which receives your IP address like any web request; the player itself uses YouTube's privacy-enhanced mode.
• Google for analytics, only with your consent.
• postcodes.io, which turns a postcode district or town name into a location for event searches. It receives the district or town, never a full postcode.
• Cloudflare and our hosting provider, which carry and store the website's traffic and data.

Official ticket sellers. Ticket links take you to an external seller such as Ticketmaster or Universe. The seller handles your booking and payment under its own privacy and cookie policies. TicketDay does not receive your ticket payment details.

Some of these providers may process data outside the UK. Where they do, they use legal safeguards approved under UK law, such as the UK International Data Transfer Addendum.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it to another service. Where we rely on consent, you can withdraw it at any time. Email [email protected] and we'll reply within one month.

If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Last updated 11 November 2026.