Privacy Policy

Cartelera collects the information needed to run local event ticketing: buyer name, buyer email, buyer phone number, ticket details, event details, organizer account details, and basic reservation status.

When you sign in with Google, Cartelera receives authentication information from Supabase Auth, such as your email address, display name, and account identifier. Cartelera does not receive your Google password.

We use buyer information to create reservations, show ticket pages, send ticket emails, prevent duplicate or abusive reservations, and help organizers manage attendee lists.

We use organizer information to authenticate dashboard access, connect events to the correct organizer, publish event pages, and send operational messages about the service.

Cartelera uses Supabase for authentication and database services and Resend for ticket email delivery. Paid checkout and Stripe payment processing is future scope, not part of the current free-ticket MVP.

Public event pages may be hosted on Cloudflare infrastructure. Standard request metadata, such as IP address and user agent, may be processed for security, routing, and reliability.

Cartelera uses separate managed PostHog projects for staging and production to measure whether the discovery experience helps people find a useful place, activity, or event. We capture only feed views, filter changes, item opens, outbound action clicks, and empty-result views, with limited properties such as municipality, time window, category, public item identifier, action type, result count, and surface version.

Discovery measurement uses a randomly generated anonymous browser identifier stored in local storage. Cartelera does not identify people in PostHog or send names, email addresses, phone numbers, source URLs, or raw coordinates. Autocapture and session replay are disabled. You can reset the anonymous identifier by clearing Cartelera site data in your browser.

Cartelera shares attendee information with the organizer of the event tied to the ticket so the organizer can manage attendee support and event operations. Cartelera does not sell buyer or organizer contact information.

We may disclose information if required by law, to protect the service, to investigate abuse, or to respond to security and fraud concerns.

Cartelera keeps ticket, order, and event records as needed for event operations, buyer access, organizer records, dispute handling, and platform security. Retention periods may vary by event and operational need.

We use access controls, signed ticket links, and service-provider security controls to protect data. No internet service can guarantee perfect security, so buyers and organizers should protect their account sessions and ticket links.

You can choose not to reserve a ticket or not to sign in with Google. If you need help with your data, a ticket email, or an organizer account, contact Cartelera using the email below.

Privacy questions and data requests can be sent to info@cartelera.biz.