Who can see your attendee data

On most ticketing platforms, dozens of companies can access your attendees' personal information. Here is exactly who can see what on Chobble Tickets, and how that compares to other platforms.

Chobble Tickets (managed hosting)

On Chobble's managed hosting, attendee data is encrypted at rest with strong encryption derived from your admin password. When an attendee registers for your event, their personal information is encrypted before it is written to the database. It is only decrypted when you log in and view it.

Here is exactly who can access your attendees' personal information:

Who What they can see Why
You (the organiser) Names, emails, phone numbers, addresses, custom question answers You log in and decrypt the data with your password
Your email provider (if configured) Email addresses and names on confirmation emails Mailgun, Resend, Postmark, or SendGrid delivers the email you choose to send
Stripe or Square Payment card details, email, name The payment processor handles the transaction
Chobble Encrypted data on the server, decrypted only when you view it Chobble hosts the database but does not access, share, or use attendee data

That is the complete list. There are no advertising networks, no analytics trackers, no data brokers, and no audience profiling.

If you run a free event and choose not to collect email addresses, nobody other than you can see your attendee records. The payment processor is not involved because there is no payment. The email provider is not involved because there are no emails. The data sits encrypted in the database, readable only by someone with your password.

Chobble Tickets (self-hosted)

If you self-host Chobble Tickets, the list is even shorter:

Who What they can see Why
You (the organiser) Everything you choose to collect Your server, your encryption keys
Your email provider (if you configure one) Email addresses and names on confirmation emails You choose the provider, or choose not to send emails at all
Stripe or Square (if you charge for tickets) Payment details You connect your own payment account, or run free events without one

Chobble has no access at all. The encryption keys never leave your infrastructure. You can choose whichever email provider you want, or none. You can inspect every line of the open source code to verify this.

How other platforms compare

The independent tracker database WhoTracks.me (run by Ghostery) counts how many third-party tracking companies are present on websites. Here is what they found on major ticketing platforms:

Platform Trackers detected Trackers per page
Ticketmaster 65 not published
Eventbrite 42 6.07
See Tickets 38 not published
Ticket Tailor 18 3.88
Chobble Tickets 0 0

Each tracker is a separate company that receives data about the person visiting the page. This typically includes IP addresses, browser information, device identifiers, and browsing behaviour. The trackers on these platforms include advertising networks, data brokers, social media companies, and analytics providers.

You can look up any platform on WhoTracks.me and see the full list for yourself. You can also read each platform's privacy policy and count the number of third-party companies listed in it. They are long documents.

These tracker counts were checked in April 2026 and may change over time. The underlying pattern does not: platforms that make money from advertising and audience data have trackers, and platforms that do not make money from advertising and audience data do not.

Why the difference is structural

The large ticketing platforms already charge per-ticket fees. Those fees do not go towards hosting your event page or storing your attendee records. The actual cost of doing that is almost unmeasurably small. The per-ticket fees pay for marketing budgets, sales teams, executive pay, and investor returns. On top of those fees, they also track your attendees across dozens of advertising networks. They charge you, and they track your attendees. They do both.

Chobble's income comes from the flat annual fee you pay. There is no advertising revenue, no data partnerships, and no investor expecting growth at your attendees' expense. As a community interest company, Chobble cannot distribute profit to shareholders.

Chobble does not want to be the only ticketing platform. The source code is public under AGPLv3 so that anyone can run their own instance. The goal is a distributed alternative to centralised ticketing, not a replacement monopoly. The more independent hosts there are, the harder it is for any single company to build a database of every event attendee in the country.

What your email provider can see

If you configure an email provider to send confirmation emails, that provider can see the email addresses and names of attendees who receive confirmations. On Chobble's managed hosting, the default provider is Mailgun.

This is true of any system that sends email. The difference is what happens with that information:

  • Transactional email providers like Mailgun, Postmark, Resend, and SendGrid process emails on your behalf. They are not advertising companies and do not use your attendee list to market other products or events.
  • On Chobble Tickets, you choose which provider to use, and you can switch at any time. If you self-host, you can use any provider or choose not to send emails at all.

If you do not want any third party to see email addresses, you can run events without collecting emails and without configuring an email provider. Attendees still receive their tickets via the confirmation page and can add them to Apple or Google Wallet.

What Stripe and Square can see

If you charge for tickets, the payment processor (Stripe or Square) handles the transaction. They see the attendee's payment card details, name, and email address as part of processing the payment.

Stripe and Square are payment processors, not advertising companies. They do not market other events to your attendees or share payment data with advertising networks.

If you run free events, no payment processor is involved. Combined with not collecting emails, this means the only person who can see your attendee records is you.

Sources

Tracker counts are from WhoTracks.me (run by Ghostery), which analyses real browsing data. You can look up any website yourself. The counts on this page were checked in April 2026 and may change over time.