Privacy Policy

1. Introduction

CHANCE (“we,” “us,” or “our”) operates the website located at chance.party (the “Site”). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit the Site, purchase tickets, or attend our events.

By using the Site, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Site.

2. Information We Collect

2.1 Information You Provide

When you purchase tickets through our guest checkout system, we collect the following personal information:

• Name (first and last) — used to identify your order and generate your ticket(s).
• Email address — used to send your order confirmation, QR code ticket(s), and event-related communications.
• Phone number — used for event-day communications such as last-minute changes to venue or schedule.

We do not require you to create an account. Your email address serves as the unique identifier for your purchases.

2.2 Payment Information

All payment transactions are processed by Stripe, Inc. When you make a purchase, your payment card information (card number, expiration date, CVV) is collected and processed directly by Stripe. We do not receive, store, or have access to your full payment card details.

We receive from Stripe a limited set of transaction data, including: a Stripe customer identifier, the last four digits of your card, the card brand, the payment amount, and transaction status. This information is used for order management, refund processing, and fraud prevention.

Stripe's collection and use of your payment information is governed by Stripe's Privacy Policy. Stripe is PCI-DSS Level 1 certified, the highest level of certification in the payment card industry.

2.3 Information Collected Automatically

When you visit the Site, we automatically collect certain information through analytics and logging technologies:

• Device and browser information — browser type, operating system, device type, screen resolution.
• Usage data — pages visited, time spent on pages, referral source, click interactions, scroll depth.
• Network information — IP address (used for reservation rate limiting and anonymized in analytics), approximate geographic location derived from IP address.
• Cookies and similar technologies — see Section 5 below.

2.4 Information Collected at Events

At our events, we may collect the following information:

• QR code scan data — when your ticket is scanned at the door, we record the time of check-in for attendance tracking and to prevent duplicate use of tickets.
• Photographs and video — event photography and videography may capture your likeness. See our Terms of Service for the media release provisions.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Order fulfillment — processing your ticket purchase, sending confirmation emails with QR code tickets, and managing reservations.
• Event operations — managing check-in at the door, verifying ticket validity, and tracking attendance against capacity limits.
• Communication — sending event-related updates such as schedule changes, venue information, or cancellation notices. We will only contact you regarding events you have purchased tickets for.
• Analytics and improvement — understanding how visitors use the Site to improve the user experience, optimize the checkout process, and make informed decisions about future events.
• Fraud prevention — detecting and preventing fraudulent transactions, unauthorized ticket use, and abuse of the reservation system (such as rate limiting by IP address).
• Legal compliance — complying with applicable laws, regulations, and legal processes.

We do not sell your personal information. We do not use your information for marketing purposes unrelated to events you have purchased tickets for.

4. Google Analytics

We use Google Analytics 4 (“GA4”), a web analytics service provided by Google LLC (“Google”), to understand how visitors interact with the Site. GA4 collects information such as:

• Pages viewed and time spent on each page.
• Referral sources (how you arrived at the Site).
• Device type, browser, operating system, and screen resolution.
• Approximate geographic location (city/region level, derived from anonymized IP address).
• Interactions with site elements (button clicks, scroll depth, form submissions).

GA4 uses first-party cookies (see Section 5) to distinguish unique users and sessions. Google may also use this data in accordance with its own privacy practices.

We have configured GA4 with IP anonymization enabled. We do not send personally identifiable information (such as names or email addresses) to Google Analytics.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser's cookie settings. For more information about how Google collects and processes data, see Google's Privacy Policy.

5. Cookies and Tracking Technologies

The Site uses the following cookies and similar technologies:

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking the reservation cookie will prevent you from completing ticket purchases.

6. How We Share Your Information

We share your personal information only in the following circumstances:

• Stripe — your payment information is shared with Stripe to process your transaction. Stripe acts as an independent data controller for payment data.
• Google — anonymized usage data is shared with Google through GA4 for analytics purposes.
• Resend — your email address and name are shared with Resend, our transactional email provider, to deliver order confirmation emails and event communications. Resend processes this data on our behalf.
• Vercel — the Site is hosted on Vercel. Vercel may process server logs containing IP addresses and request data as part of its hosting services.
• Legal requirements — we may disclose your information if required to do so by law, regulation, legal process, or governmental request.
• Protection of rights — we may disclose your information to enforce our Terms of Service, protect our rights or property, or protect the safety of our users or others.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

7. Data Retention

We retain your personal information as follows:

• Purchase records (name, email, phone, order details) — retained for 3 years after the event date for accounting, tax, and legal purposes.
• Reservation data — expired reservations are cleaned up automatically. Active reservation data is retained only during the checkout process.
• Analytics data — GA4 data retention is set to 14 months, after which it is automatically deleted by Google.
• Server logs — retained by our hosting provider (Vercel) for up to 30 days.

8. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data transmitted between your browser and the Site.
• Payment processing handled entirely by Stripe (PCI-DSS Level 1 certified) — we never receive or store full payment card data.
• Secure, encrypted database connections for stored personal information.
• Rate limiting on reservation creation to prevent abuse.

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee its absolute security.

9. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access — you may request a copy of the personal information we hold about you.
• Correction — you may request that we correct inaccurate personal information.
• Deletion — you may request that we delete your personal information, subject to our legal retention obligations.
• Opt-out of analytics — you may opt out of Google Analytics tracking as described in Section 4.

To exercise any of these rights, please contact us at chance.live.events@gmail.com. We will respond to your request within 30 days.

10. Colorado Privacy Rights

If you are a Colorado resident, you have additional rights under the Colorado Privacy Act (CPA), effective July 1, 2023. These include the right to access, correct, and delete your personal data, as well as the right to opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling.

We do not sell personal data or use it for targeted advertising or profiling as defined under the CPA. To exercise your rights under the CPA, please contact us using the information in Section 13.

11. Children's Privacy

The Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. Our events have a minimum age requirement of 16 unless otherwise specified. If we learn that we have collected personal information from a child under 13, we will promptly delete that information. If you believe a child under 13 has provided us with personal information, please contact us at chance.live.events@gmail.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post the updated Privacy Policy on this page and update the “Last Updated” date at the top. We encourage you to review this Privacy Policy periodically. Your continued use of the Site after any changes constitutes acceptance of the revised Privacy Policy.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: chance.live.events@gmail.com