Security
How we protect payments and accounts, and how to tell us about a security problem.
- Questions?Contact us or email bookings@ticktap.co.uk.
- Other policiesTerms · Privacy · Refunds · Fees · Complaints
Card payments
Card payments are processed by Stripe. Your full card number goes straight to Stripe and is never stored by TickTap. We receive a confirmation and the last digits and brand of the card.
Organiser accounts
Organiser passwords are stored securely hashed, never in readable form. Keep your login details secure, and tell us straight away if you think your account has been accessed without your permission.
Tickets
Each ticket carries a unique QR code valid for one entry, and shows as used once scanned.
Reporting a security issue
If you think you’ve found a security vulnerability on ticktap.co.uk, please email bookings@ticktap.co.uk with “Security report” in the subject line. Please include how to reproduce it.
- Give us reasonable time to fix the issue before telling anyone else.
- Don’t access, change or delete other people’s data, and don’t disrupt the service.
- Don’t make purchases or use real people’s accounts to test.
We don’t currently run a paid bug bounty, but we’re grateful for responsible reports and will reply to let you know what we’re doing.