Privacy

We store the name, email, role and profile you submit, plus the social account you use to sign in. Session cookies are httpOnly. Affiliate clicks set a cookie named hmt_ref so a later ticket sale can credit the DJ or promoter. A separate visitor cookie is stored as a hash. We do not store the raw IP address of an affiliate click. Card fingerprints used to block self-referral are stored only as a hash.

Magic-link tokens are stored as a hash. A local development mailbox can show the raw link only when that mode is explicitly turned on.

Guest lists hold guest names and party size for the door. The phone link is unguessable and read-only. Do not post it publicly.

Join requests ask for consent before we contact you. The hidden website field is a spam trap and is discarded.