Last update:
August 15, 2026
We modify this Privacy Policy from time to time in which case we will update the date at the top of this Privacy Policy. If we make changes that are material, we will use reasonable efforts to notify you (e.g. by email sent to the email address specified in your account) and obtain your consent and take additional steps as required by applicable law. Notice may be by email to you at the last email address you provided us, by posting notice of such changes on the Services, or by other means, consistent with applicable law.
IF YOU DO NOT AGREE TO ANY UPDATES TO THIS PRIVACY POLICY PLEASE DO NOT ACCESS OR CONTINUE TO USE THE SERVICES
2.1.1: Account information you provide, such as name, email address, phone number, and password. We use this to create and manage your account, authenticate you, and contact you about the Service.
2.1.2: If you sign in with Google or Apple, we collect your email and a third-party identifier so we can authenticate you and link that login to your CoatCheck account.
2.1.3: If you use a phone number to sign in, we store that number and send a one-time code so you can authenticate.
2.1.4: Ticket and purchase information, such as ticket numbers, event or venue details, order amounts, and delivery details (email or SMS). We use this to issue tickets, confirm purchases, handle refunds, and show history.
2.1.5: Files you upload, such as profile or business images. We store these so they can be displayed in the Service.
2.2.1: When you scan and redeem a ticket for a customer, we collect who scanned and redeemed it for business records and security.
2.2.2: When a business sends a ticket by SMS, we record who sent it and which business sent it, for security and to protect the platform.
2.2.3: Business profile and payout information, such as business name, contact email, country, and Stripe connected account details needed to collect payments and pay out funds.
2.3.1: When you register and sign in, we collect your IP address, device ID, device type, approximate location derived from IP, and a log of actions needed to keep your account and the platform secure.
2.3.2: We collect product-usage data such as pages visited, feature use, and (in production) session recordings and automatically captured clicks so we can understand how the Service is used and improve it.
2.3.3: We collect error and diagnostic data, including request context that may include IP address and account identifiers, so we can find and fix problems.
We do not sell your personal information. We share information with the service providers listed in section 4 so we can operate CoatCheck. Each provider receives only the data needed for that job.
We may also share information if required by law, to protect the rights or safety of CoatCheck or others, or if we transfer the business (for example in a merger or acquisition).
3.1: We do not send your full account to every provider. Data typically stays in our systems on Amazon Web Services and is sent to another provider only when a feature needs it.
3.2: Some features use more than one provider in the same flow. Examples:
3.3: These providers do not receive data from each other directly through CoatCheck. CoatCheck is the system that sends each provider what it needs.
We use the following companies to run the Service. Each has its own privacy policy. We may add or replace providers as we operate the Service; we will update this list when we do.
Hosts our API, database, cache, file storage, and transactional email (including Amazon SES and Amazon S3). The website may also be delivered through AWS Amplify.
Data we share: Account, ticket, business, and file data needed to operate the Service, plus recipient email addresses and email content for transactional messages.
May host or deliver the CoatCheck website.
Data we share: IP address, request logs, and other data created when you load the site.
Google Firebase Authentication
Manages Google and Apple sign-in and related account identifiers. We also use Firebase Cloud Messaging to send push notifications to devices that have opted in.
Data we share: User ID, email address, provider identifier, and (for push) device tokens and notification content.
Identity providers if you choose to sign in with Google or Apple (through Firebase).
Data we share: Email address and a provider user identifier. Apple’s privacy policy is at https://www.apple.com/legal/privacy/.
Sends SMS login codes, ticket numbers, pickup notices, and shareable ticket links. Messages are delivered through mobile carriers.
Data we share: Phone number and message content (which can include login codes, ticket numbers, business names, and ticket links).
Processes customer payments, CoatCheck subscriptions, refunds, and business payouts through Stripe Connect. CoatCheck does not store payment card numbers; Stripe processes card data.
Data we share: Customer email, name, payment amounts, billing and payout details, business identity information needed for Connect onboarding, and Stripe customer or connected-account IDs.
Product analytics so we can understand how the Service is used.
Data we share: Account ID, email, name, page URLs, feature-usage events, and (in production) session recordings and automatically captured clicks.
Privacy-oriented website analytics (page views, without marketing cookies).
Data we share: Page URL, referrer, and aggregated browser or device information. We do not send your name or email to Plausible.
Error and performance monitoring so we can diagnose failures.
Data we share: Error reports, IP address, request headers, and account or session identifiers. Our client is configured to send default personal data that appears in those reports.
Realtime updates for ticket activity, kiosks, and business dashboards.
Data we share: Connection tokens, client IDs tied to an account or kiosk, and event payloads such as ticket IDs and redeem events.
Looks up approximate location and timezone from IP address at sign-in, for security and session context.
Data we share: IP address.
Shows event and venue maps and looks up addresses when a business sets a location.
Data we share: Map-load requests (including IP address) and address-search text entered in the location picker. Public event pages may also send venue coordinates to render the map.
Internal operational alerts for our team (for example new sign-ups and service errors). Slack’s privacy policy is at https://slack.com/trust/privacy/privacy-policy.
Data we share: Account IDs and error or event messages. Those messages can include identifiers or other details that appeared in the underlying error.
Scheduling on our contact and support pages if you book a call.
Data we share: Name, email, and any other details you enter in the booking form, plus calendar availability needed to complete the meeting.
5.1: We use reasonable measures to help protect information from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. You should understand that no data storage system or transmission of data over the Internet or any other public network can be guaranteed to be 100 percent secure. Information collected by third parties may not have the same security protections as information you submit to us, and we are not responsible for protecting the security of such information.
6.1: Deleting your account. You can request account deletion in the app or mobile website, or send an email to support found on the support page. We delete your account after 30 days of the initial request.
6.2: Request account data. To request your data, send an email to support@coatcheck.app. Within 3 days you will receive a zip file with associated data from our database.
6.3: Opt out of marketing. We currently do not send marketing emails.
7.1: We do not knowingly collect Personal Data from children under the age of thirteen (13). If you are under the age of thirteen (13), please do not submit any Personal Data through the Services. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce our Privacy Policy by instructing their children never to provide Personal Data through the Services without their permission. If you have reason to believe that a child under the age of 13 has provided Personal Data to us through the Services, please contact us and we will endeavor to delete that information from our databases.
If you have questions about this Privacy Policy or how we share data, contact us at support@coatcheck.app.
