SwayLine Privacy Policy

Controller: SwayLine LLC ("SwayLine," "we," "us"), a Texas limited liability company
Contact: [email protected]
Postal address: SwayLine LLC, PO Box 875, Justin, TX 76247, USA
Effective date: 2026-10-17

1. Who we are

SwayLine is software that event organizers use to run conventions and events — selling tickets, taking applications, publishing schedules and communicating with attendees.

We look after your SwayLine account. The event organizer looks after their event: what you give them, what they decide about your order or application, and whether you get in the door is theirs, not ours. Most organizers have their own privacy policy, so please read theirs as well.

2. What we collect

• Your account. Your email address, which is how you sign in; your password, kept only as a scrambled hash and never in plaintext; your name and display name; a phone number if you give us one; and the date and version of these terms you accepted when you created the account.
• Google or Apple sign-in. If you choose "Continue with Google" or "Continue with Apple," that company gives us your account identifier, email address and name. If you use Apple's "Hide My Email," the address we receive is one Apple forwards to you, so our emails reach you through Apple. We never see your Google or Apple password.
• Orders and tickets. What you bought, what you paid, your tickets, and whether each one has been scanned at the door. If you buy tickets for other people, we store the names and email addresses you enter for them.
• Payments. Card payments happen on Stripe's own page. We never receive or store your card number or security code. We keep the amount, the result and Stripe's reference.
• What you submit. Whatever an organizer's form asks you for — an application, a proposal, your contact details. Organizers build their own forms, so the fields vary.
• Notifications. Your preferences, and — only if you turn push notifications on — the subscription your browser creates.
• Automatically. Your IP address and basic device information in our server logs, plus the cookies and browser storage described under Cookies and browser storage below.

Organizers and their staff may also enter information about people involved in their event, such as guests, vendors and volunteers.

We collect no precise location from your device, no biometrics, and we run no analytics, advertising or third-party trackers of any kind.

Cookies and browser storage

SwayLine keeps a small amount of information in your browser. All of it is there to make the platform work or to remember a choice you made, and none of it follows you onto other websites.

• Sign-in security (a cookie): confirms that the browser finishing a Google or Apple sign-in is the one that started it. Kept 10 minutes, during that sign-in only.
• Cloudflare security (cookies set by Cloudflare): Cloudflare's protection may set these, for example when it checks that a visitor is human or applies rate limits. Kept as Cloudflare sets them; see Cloudflare's cookie list.
• Staff display settings (two cookies): the theme and the typeface an organizer's staff member picked. Kept one year.
• Your sign-in (browser storage): keeps you signed in on this device. Kept until you sign out.
• Your cart and buyer details (browser storage): the tickets you picked, and the name, email and phone you typed at checkout, kept through a reload or a return visit. The cart is kept until you pay or sign out; your details until you sign out or your sign-in expires.
• Offline tickets and saved schedule (browser storage): lets your tickets and the schedule items you saved open without a connection. Kept until you sign out.
• Your place in a virtual line (browser storage): keeps your line number if you reload the page. Kept until you leave the line.
• A link you opened from an email (browser storage, this tab only): keeps a personal link, such as an itinerary, a press pass, a shift list, a vendor payment or a claim, working if you reload. Kept until you close the tab.
• Sign-in steps (browser storage): returns you to the page you were on after signing in, and signs out your other tabs when you sign out of one. Kept until the step finishes.
• Your choices (browser storage): things you picked, such as the event you are working on, a prompt you dismissed, or how a staff page is filtered. Kept until you clear your browser's storage.
• The app itself (browser storage): copies of the app's own pages and code, so it opens quickly and works offline; never your orders or account. Kept until the app updates.
• Push notifications (your browser's push service): only if you turn them on, so we can send the notices you asked for. Kept until you turn them off.

Signing out removes your sign-in, cart, buyer details, offline tickets and saved schedule from the device. You can also delete everything SwayLine has stored at any time from your browser's settings; you will then need to sign in again.

Do Not Track and Global Privacy Control. We do not track you across other websites and let no one else do so on ours, so there is nothing for a "Do Not Track" or Global Privacy Control signal to switch off. Every visit is treated the same whether or not your browser sends one.

3. How we use it

• To create and secure your account and run the platform.
• To process orders and applications, deliver tickets, and support the organizer's refunds and disputes.
• To let organizers run their events — check-in, rosters, schedules and application review.
• To send you order confirmations, ticket delivery, and account and security notices.
• To send event notices from an organizer whose event you hold a ticket for. You can change or switch these off at any time from your account.
• To answer your questions and provide support.
• To keep the records that law, tax and payment-dispute rules require.

We do not sell your personal information, and we do not use it for targeted advertising.

4. Who we share it with

The event organizer whose event you take part in. Their staff can see your name and email address, what you bought, your tickets, and anything you submitted on their forms. They can also block your account from signing in to SwayLine. Where an organizer chooses to publish a page — a schedule or a floor plan — the names on it are visible to anyone.

The companies that run the platform for us, each limited to what it needs: Stripe for card payments, Microsoft Azure for hosting and email delivery, Cloudflare for security and delivery, Google or Apple if you sign in with either, and your browser's own push service if you turn notifications on.

Anyone the law requires — to comply with the law, respond to lawful requests, enforce our terms, or protect people's rights and safety.

A buyer of the business, if SwayLine is merged, acquired or sold, subject to this policy.

5. How long we keep it

Orders, tickets, applications and our security logs have no automatic expiry. We keep them while your account is open, and afterwards for as long as legal, tax, accounting and payment-dispute obligations require. Database backups are kept 35 days and access logs 365 days.

6. Your privacy rights

Depending on where you live, you may have the right to see, correct, delete or get a copy of your personal information, to object to some uses of it, and to appeal a refusal. Email [email protected]. We will check who you are before acting, and answer within the time the law allows.

What we can and cannot do — honestly, so you know before you ask. There is no self-service delete button, and requests are carried out by hand.

• We can disable your account so it can no longer sign in, and delete or correct individual records about you.
• We cannot erase you completely. Past orders and tickets are financial records and are kept, along with the names and email addresses on them. Our security and change logs are built so entries cannot be removed without destroying their ability to show they have not been tampered with.
• Some copies are not ours to delete. Stripe holds the billing details you type on its own page, under its own policy.
• Backups lag. Anything we delete can remain in an encrypted backup for up to 35 days.

We will tell you exactly what was removed and what was not.

7. Minors

You must be 18 to hold a SwayLine account. Under-18s take part through an adult's account, or through an organizer's own process.

Some organizers accept volunteers under 18. Where a volunteer's date of birth shows they will be under 18 at the event, the platform will not let a shift be confirmed until the organizer's staff record that they have obtained guardian consent. The platform records that consent; it does not verify it — obtaining and holding it is the organizer's responsibility.

SwayLine is not directed to children under 13 and we do not knowingly collect their information. Where a form asks for a date of birth, it refuses a submission stating an age below 13. If you believe a child under 13 has given us information, email [email protected] and we will delete it.

8. Security

We protect your information with encryption in transit, hashed passwords, encrypted two-factor secrets, access controls, separation between organizers' data, and a payment design in which card details never reach our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Where your information is processed

SwayLine is operated from the United States, and our hosting, databases, backups and email are in US regions. Some of the providers in §4 operate globally, so a request may pass through a data centre outside the United States on its way to us.

10. Changes to this policy

We may update this policy. When we do we will change the effective date above, and give additional notice of material changes as required. Continued use after an update is what constitutes acceptance, where the law permits.

11. Contact

SwayLine LLC
PO Box 875
Justin, TX 76247, USA
[email protected]