Privacy Policy

Last updated November 1, 2026

The short version: festival organizers own their audience. We use your details only to run your festival, we never sell personal data, and we never market other events to your attendees, vendors or volunteers.

1. Who we are and how roles work

fest.club is operated by TheWorkCompany ("we", "us", or "fest.club"). For festival organizers who sign up on fest.club, we act as the data controller for your account and billing details. For attendees, vendors, sponsors and volunteers who interact with a specific festival page hosted on fest.club, the festival organizer is the data controller and seller of record, and fest.club acts strictly as a service provider and data processor on the organizer's behalf.

2. What we collect on fest.club

When you claim a festival link or request a quote on fest.club, we collect your festival name, chosen URL slug, festival type, and email address, along with a basic server timestamp and rate-limiting request hash to prevent automated spam. We use this information solely to reserve your festival link, set up your organizer workspace, and email you about your festival.

3. Attendees, vendors and volunteers

Each festival organizer controls the records of their ticket buyers, RSVPs, vendor applicants and volunteer shift sign-ups. Unlike marketplace ticketing sites, fest.club never adds your attendees, vendors or volunteers to a cross-festival marketing list, never retargets them with ads, and never emails them to promote competing events. Vendors who opt in to save their booth profile (truck dimensions, power needs, menu photos, and insurance or permit files) can reuse that profile when applying to other festivals on fest.club, and can delete their saved vault at any time.

4. Offline schedules and local device storage

When an attendee taps "Save" on a set or generates a lock-screen schedule poster, those selections are stored locally in the attendee's own browser (using localStorage and a Service Worker cache) so the schedule works when cell towers are congested. We do not use third-party advertising cookies, tracking pixels or behavioral fingerprinting.

5. Sponsor booth scans and opt-in leads

When an attendee scans a sponsor's booth QR code to collect a festival passport stamp, the system records one unique anonymous visit count per device for the sponsor's Monday summary report. A sponsor receives an attendee's name or email address only if that attendee explicitly checks the opt-in box to share their contact details with that specific sponsor.

6. Payments and subprocessors

All ticket, vendor booth and sponsorship payments are processed directly through Stripe Connect into the organizer's own Stripe account under Stripe's Privacy Policy. Full payment card numbers and bank credentials never touch fest.club's servers. We use minimal infrastructure providers (hosting and transactional email delivery) bound by data-processing agreements and strict confidentiality.

7. Data retention, export and deletion rights

Organizers can export their festival records (CSV/JSON) or delete their festival workspace at any time. Regardless of where you live (including under the GDPR, UK GDPR, and state privacy laws such as the CCPA/CPRA), you have the right to request access to, correction of, portability of, or deletion of the personal data we hold about you. To exercise these rights or ask a privacy question, email [email protected] and we will respond within 15 business days.