Exeter Ticket Exchange

Product privacy notice. Not solicitor advice.

Who we are

Exeter Ticket Exchange is a student peer-to-peer ticket marketplace with optional FIXR drop alerts. Not affiliated with the University of Exeter or the Students' Guild. For data requests, email hello@exeterticketexchange.com.

What we collect for the exchange

University email (@exeter.ac.uk), real name (public on listings by design), optional Instagram/Snapchat handles and course, referral codes, device id for the once-per-device wheel, session cookies, encrypted ticket screenshots and QR payload hashes, order/payment intent ids, door-fail claim proof and seller evidence you upload (photos, videos and screenshots), and basic audit events (e.g. list, buy, dispute).

Photos and videos sent with a door-fail claim, and the evidence a seller sends back, are stored encrypted and only our admin team can view them. The seller sees what the buyer wrote and how many files they sent, not the files. The buyer sees the claim's status, not the seller's statement.

What we collect for drop alerts

Follows and preferences — the nightclubs, societies and nights you follow, which alert moments you want (dropping soon, 10-minute reminder, just dropped, restock, release time and resale pings), and whether email is on. We also count how many students follow each nightclub, venue and society (never who) to list the most-followed first in filters and pickers. We never show a count below 10.
I want this night — the nights you tap ‘I want this night’ on, and when. Tapping it also follows that night. We use it to tell you first when Exeter students list tickets for that night on ExeTix. We show sellers only a number (‘5 students want tickets for this night’), never who, and only once 3 or more students want a night.
Push endpoints and keys — when you turn on push, your browser gives us a push service address plus the encryption keys needed to send to it, and we store the browser's user-agent string so you can tell your devices apart. It identifies that browser, not you by name. Removed when you turn push off or the push service tells us the device is gone.
Alert send log — which alert we sent you, for which night, when, how it was delivered (push, email) and how long after FIXR changed. Used to avoid duplicates and to show you “Pings we sent you”.
Unsubscribe links — each alert email carries a signed link naming your account and what it unsubscribes (one nightclub, society, night, or all alerts). We don't store the links; they stop working after 180 days.
Society requests — if you ask us to add a society, the name you typed and your account.
Society search — what you type in the society search box is sent to us only to find matching societies. We don't save it or link it to your account, though our hosting provider's standard request logs may keep it for a short time.
FIXR check records — technical logs of each FIXR check we receive (source, time, counts), and for each night the release time we read from the organiser's description on FIXR. They contain no personal data.

Friends and Tonight in Exeter

Friends — off until you add someone. When you add a friend by their code we store that you added them, and we switch on ‘Show my follows to friends’ for you (the page says so, and you can turn it off on Friends). Only when you have both added each other, and both have it on, does either of you see the other's first name on nights you follow (the night itself, or its nightclub or society). Nobody else sees anything — not people who haven't added you back, and not us in any public place. Someone who added you sees only whether you added them back. Kept until either of you removes the other or closes the account.
Tonight in Exeter — a 5pm push listing tonight's nights and this week's drop times. Off until you turn it on; by email only if you also turn that on, and each email has a link to stop them. We use the nightclubs, societies and nights you follow to put yours first, and keep a note that today's went out (a few days) so you never get it twice.

Free society tickets

When you claim a free ticket to a society's event, or join its waitlist, we store the claim and share your name and email address with the organising society's committee for that event: they see the list of who has claimed, can export it (name and email only), and their door staff see your name when your ticket is scanned. We share nothing else — not your other tickets, follows or payment details. The society is responsible for how it uses that list; we tell organisers to use it only to run the event and to delete it within 30 days. Releasing your ticket takes you off the list.
At the door — we record when your ticket was checked in and which organiser or door-staff account scanned it.
If you organise — we store which society your account can run events for (from a committee link, a code, or a request we approved, with the committee role you told us), the events you create, and the door staff you add. Door staff can scan tickets and see the count for one event; they never see the attendee list.
Kept for 12 months after the event, then deleted or anonymised. Free tickets involve no payment, so no payment data is collected for them.

Subscription billing (ExeTix Drops)

If you start an ExeTix Drops subscription we store the Stripe customer and subscription ids, the plan status (trial, active, payment problem, cancelled), trial and renewal dates, whether you asked to cancel, when we sent your trial reminder, and your Drops referral earnings (which referred friend's payment earned each one, and whether it came off your bill, was paid as referral cash or was reversed after a refund). Card details are entered with Stripe and never reach us — we store no card numbers.

Error reports and Report a problem

If something breaks in your browser or on our servers, we record the error message, technical details, the page path (without anything after a “?”) and your account id if you're signed in — never your name, email or what you typed. If you use Report a problem, we store what you write and any screenshot you add (re-saved without its hidden location data, stored encrypted, seen only by our admins) and email it to our admins. We use these only to fix problems and delete them after 12 months.

Why we use it

To run the marketplace (account, listing, checkout, release, door-fail claims), prevent fraud and duplicates, show trust signals, operate referrals and fee credits, send the drop alerts you asked for, and run the subscription you started (trial reminders, payment problems, cancellation). Legal bases: contract (providing the service you signed up for), legitimate interests (fraud prevention, safety, keeping alerts reliable), and legal obligation (tax and accounting records). We don't send marketing email.

Payments

Card data is handled by Stripe. We store payment intent / status ids and, if you sell, your Stripe Connect Express account id and whether payouts are enabled — not full card numbers. For ExeTix Drops we store Stripe customer and subscription ids, not card data. Stripe's own privacy notice applies to payment processing. If Stripe is in test mode, no real charges are taken.

Sharing

Buyers who pay see the ticket image and entry details they need. Public profiles show your real name and optional socials. We do not sell your data. Processors: hosting and database, Stripe for payments and subscriptions, email delivery, and the push service your browser or phone uses (for example Apple, Google or Mozilla) to deliver notifications — the push service carries the notification encrypted and never receives your name or email.

Retention

Ticket screenshots: intended to be deleted ~30 days after the event.
Audit and dispute records: kept longer so we can handle chargebacks and bans (target ~24 months).
Door-fail photos and videos (buyer proof and seller evidence): deleted 12 months after the claim is decided. Files uploaded but never sent with a claim are deleted within a few days.
Alert send log: 12 months.
FIXR check records: 7 days.
Follows, “I want this night” taps, alert preferences and push endpoints: until you remove them, unfollow the night, unsubscribe, turn push off, or close your account.
Society requests: until we have dealt with them.
Subscription and billing records: as long as tax and accounting law requires.

You can ask about deletion; some records may need to stay for fraud, dispute or legal reasons.

Your choices

Real name is required and public once set — that's how trust works here. Socials and course are optional. Drop alerts are off until you turn them on; you can change what you follow, switch push off, or stop everything on Drops. You can cancel ExeTix Drops any time. You can sign out anytime. Under-18s: do not use the product.

Cookies

Strictly necessary cookies: session (signed-in), bounce-back after verify, and a referral code if you tap someone's /r/ link or type a friend's code when you sign up. The wheel sets a device cookie only on the spin page so one person cannot spin twice. We do not use advertising cookies.