Draft for review, not in force. Placeholders in [brackets] are still to be decided.
Legal requests
Whatever the request, we can only ever hand over encrypted data we cannot read, and a little information about it.
What exists
- Random account handles; the days accounts were created and last used.
- Encrypted plans, with their sizes, version numbers and when they changed.
- Encrypted keys, passkeys' public keys, and values that check a passphrase or recovery key without revealing it.
What does not exist
- Readable plans: titles, venues, prices, or the names of people on seats.
- Passphrases, secret keys, recovery keys or passkey unlocking keys, or anything that could decrypt a plan.
- Names, email addresses, phone numbers or IP addresses of users.
The service is built so that this stays true: the code is public, and each release can be checked against what the site serves (see Verify this build).
How to reach us
Requests to [contact to be added]. [Policy on notifying affected users, where the law allows, to be decided.]
Draft of 27 September 2026.