Cookie Policy
This Cookie Policy explains how Eventually Ticketing Inc. ("Eventually", "we", "us") uses cookies, local storage, tracking pixels, and similar technologies on our marketing website (eventuallyticketing.com), our application (app.eventuallyticketing.com), embedded widgets we provide that load on Customer websites, and emails we send. It supplements our Privacy Policy.
Your choices, and how they work where you are
We use two consent models, depending on where you are when you visit. We determine this from the country your connection appears to come from, as reported by our network provider. When you make a choice on the banner or the preferences page, we record that choice together with the country, your IP address and your browser's user-agent string, and keep that record for two years as evidence of your consent.
If you are in the European Economic Area, the United Kingdom, or Switzerland, you opt in. You see a consent banner on your first visit. Necessary technologies are always on. Nothing in the Functional or Performance and Analytics categories loads until you allow it. If we cannot determine where you are, we treat you the same way.
If you are anywhere else, including the United States, you opt out. We treat you as having consented to Functional and Performance and Analytics technologies from your first visit, so they load when you arrive, and you do not see a banner. You can turn any category off at any time: signed-in users under "Cookie preferences" in the user menu, and everyone at app.eventuallyticketing.com/cookies. By continuing to use the Website or Services without turning a category off, you consent to the technologies in that category as described below.
Turning a category off takes effect immediately. The technologies in that category stop loading, and we delete the cookies they had already set in your browser. Your choice is stored for 12 months in a first-party cookie (ev_cookie_consent_v1, itself Necessary) and logged as compliance evidence.
Our marketing website is different. It is hosted on Squarespace and uses Squarespace's own cookie banner, which offers its own categories and controls and applies its own region rules. We cannot change how that banner behaves, and we cannot delete cookies through it. Choices you make on our marketing website do not carry over to the application, and the reverse is also true.
By enabling Performance and Analytics and Advertising cookies and, with regard to any Necessary cookies, by using the Website or Services, you acknowledge and expressly consent to our use and our digital partners' use of standard internet data collection, processing and marketing practices. Your acceptance and consent to our and our digital partners' and service providers' use of such technology includes your ratification of our use of such technologies in the processes related to loading and executing code within your access device or web browser. This information includes, but is not limited to: (a) information about your computer, devices and internet connection when you use the Website and Services (such as your device type, browser type, IP address, and the area of the country where you are located (but not your precise geographic location)); (b) certain information about your activities while using our Website and Services (such as your referring website, click stream data, the search terms you use, your movement within and interaction with the Website and Services, the pages and features you access, use or visit on the Websites, the links that you click, and the length of time you spend using the Websites); and (c) other information collected by cookies, pixels, web beacons, scripts, and other tracking technologies.
With your consent and acknowledgment, you expressly agree to waive any and all claims against us or our digital partners under state eavesdropping, wiretapping, or pen register and/or trap and trace laws, or any similar laws related to pen register and/or trap and trace devices or processes to the extent such claims arise from our digital operations. Notwithstanding your ratification to the initial use of our data collection technologies, if you cannot accept these terms, or if you wish to withdraw your consent, you may not use our Website or Services, and in either case your continued use of the Website or Services revives your consent.
What these technologies are
Cookies are small text files a website stores in your browser. They can be set by the site you're visiting (first-party) or by services that site uses (third-party). Cookies are categorized by lifetime (session cookies disappear when you close your browser; persistent cookies survive across sessions) and by purpose.
Local storage is a browser feature that lets a site store small amounts of data on your device without using a cookie. It works similarly to cookies but is scoped to a single domain and isn't automatically sent with every request.
Tracking pixels are tiny invisible images embedded in web pages or emails. When loaded, they signal that the page was viewed or the email was opened.
Categories we use
We group cookies and similar technologies into the following categories:
- Necessary: required for the site or app to work (authentication, fraud prevention, CSRF protection). You cannot disable these and continue to use the Services.
- Functional: remember your preferences (sidebar state, pre-fill on forms, which lists you collapsed, the column widths you set). Disabling these will not break the Services but you may lose some convenience.
- Performance and Analytics: help us understand how our Services are used so we can improve them.
- Advertising: a category on our Squarespace-hosted marketing site, because Squarespace's banner offers it. We place nothing in it. We serve no interest-based advertising anywhere.
What's set on each surface
Marketing website (eventuallyticketing.com)
The marketing site is hosted on Squarespace, so much of the cookie environment is set by Squarespace's platform. Squarespace's own cookie policy is at https://www.squarespace.com/cookie-policy.
Because this site runs on Squarespace, the consent banner there is Squarespace's own and uses Squarespace's category names. We have aligned our categories to match, with two differences noted in "Categories we use" above: we add a Functional category, and we do not offer an Advertising category on our own surfaces. Squarespace's banner also decides for itself where to ask first and where to assume consent; that is Squarespace's rule, not ours, and it is described in their cookie policy linked above.
| Name | Category | Set by | Purpose |
|---|---|---|---|
crumb, ss_cvr, ss_cvt, __ssid, and other Squarespace platform cookies |
Necessary / Performance and Analytics | Squarespace | Site function and Squarespace's own analytics |
ss_marketingCookiesAllowed, ss_performanceCookiesAllowed |
Necessary | Squarespace | Records the cookie choices you make on this site |
_ga, _ga_<id> |
Performance and Analytics | Google Analytics | Marketing-site analytics |
ph_<token>_posthog, ph_<token>_* |
Performance and Analytics | PostHog | Product analytics. We use this to understand how visitors move through the marketing site and on into the application |
| Page-view beacon (no cookie) | Performance and Analytics | Fathom Analytics | Cookieless analytics; does not store anything in your browser |
rootabl, _ruid, _rvid |
Performance and Analytics (Squarespace's banner groups this under Advertising, which we do not control) | Rootabl | Affiliate referral attribution: records which partner referred you so that referral can be credited |
__stripe_mid |
Necessary | Stripe | Fraud prevention when you use the Squarespace store on this site |
__cf_bm, cf_clearance |
Necessary | Cloudflare | Bot management and security |
_eventually_session, XSRF-TOKEN |
Necessary | First-party (the "try it" form on our home page, a frame served from app.eventuallyticketing.com) |
CSRF protection and short-lived state for that form. Both expire when you close the browser |
| Cloudflare Turnstile challenge state | Necessary | Cloudflare Turnstile | Invisible CAPTCHA challenge on the "try it" form. Turnstile may set its own short-lived challenge cookies in your browser while it runs. See Cloudflare's Turnstile Privacy Addendum |
| Google Fonts (no cookie) | Necessary | The "try it" form's typeface. Your browser fetches it from fonts.googleapis.com and fonts.gstatic.com, so Google receives your IP address. Stores nothing in your browser |
Application (app.eventuallyticketing.com)
Most rows below apply once you are signed in. The Necessary first-party cookies, Cloudflare's cookies, Turnstile, Sentry, Honeybadger, PostHog and Fathom also apply on the pages you use before signing in (sign-in, sign-up, password reset, preview and the extension sign-up page). The ev_referral row below is also set before you have an account, when you follow a link to our Squarespace extension install page. That install page uses Necessary technologies, Honeybadger among them, the ev_referral row, and Rootabl's row. If you are in the European Economic Area, the United Kingdom, or Switzerland, or we cannot tell where you are, it shows the consent banner, so you can make your choice there before you install.
| Name | Type | Category | Set by | Purpose |
|---|---|---|---|---|
session_token |
Cookie (signed, persistent) | Necessary | First-party | Holds your active login session. Deleted when you sign out |
ev_cookie_consent_v1 |
Cookie | Necessary | First-party | Remembers your cookie-consent choice for 12 months (Safari limits cookies set by a page's script to 7 days, so there it can expire sooner) |
_eventually_session |
Cookie | Necessary | First-party | CSRF protection and short-lived state |
XSRF-TOKEN |
Cookie (session) | Necessary | First-party | CSRF protection: a token our pages send back with each request, so another site cannot act in your name. Expires when you close the browser |
ph_<token>_posthog |
Cookie | Performance and Analytics | PostHog | Product analytics distinct_id and session id |
ph_<token>_* |
localStorage | Performance and Analytics | PostHog | Event queue and feature flag state |
__ph_opt_in_out_<token> |
localStorage | Necessary | PostHog | PostHog's own record of your Performance and Analytics choice, written when you turn the category on or off in a tab where PostHog had loaded, so it stays off. Left in place when the other PostHog storage is deleted, because deleting it would let PostHog start again |
intercom-id-*, intercom-session-*, intercom-device-id-*, intercom.* |
Cookies, localStorage | Functional | Intercom | In-app support chat |
__stripe_mid, __stripe_sid |
Cookies | Necessary | Stripe | Fraud prevention, set only on the pages where you pay or enter a card: plan checkout and activation, buying a domain or website, and renewing one |
m |
Cookie on m.stripe.com (third-party, about 13 months) |
Necessary | Stripe | Stripe's fraud-detection cookie, set by Stripe's own frame on those pages. Sent with cross-site requests (SameSite=None) |
| Stripe fraud-detection frame state | sessionStorage on m.stripe.network |
Necessary | Stripe | Kept by the same Stripe frame on those pages. Cleared when you close the tab |
__cf_bm, cf_clearance |
Cookies | Necessary | Cloudflare | Bot management |
| Cloudflare Turnstile challenge state | Cookies / localStorage | Necessary | Cloudflare Turnstile | Invisible CAPTCHA challenge on sign-in, on preview generation, and on the extension sign-up page. Turnstile may set its own short-lived challenge cookies in your browser while it runs. See Cloudflare's Turnstile Privacy Addendum |
preview_handoff_slug |
Cookie (signed) | Necessary | First-party | Set for 30 minutes when you claim a preview site, so the page you land on next can show you your embed snippet and the address we emailed it to. Read once and then deleted |
| Error and performance report beacon (no cookie) | none | Necessary | Sentry | Sends a report when something breaks, and page-load timing for a sample of visits, so we can fix failures. Stores nothing in your browser. Reports from signed-in users carry your account id and email |
| Error report beacon (no cookie) | none | Necessary | Honeybadger | Sends a report when something breaks so we can fix it. Stores nothing in your browser. Reports from signed-in users carry your account id, email and name |
blockFathomTracking |
localStorage | Necessary | First-party | Set by us when you turn Performance and Analytics off, so Fathom stays off. Removed when you turn that category back on |
historyKey, historyIv, inertiaLocationVisit |
sessionStorage | Necessary | First-party | Navigation state for the current tab, including the key that encrypts the page data your browser keeps in the tab's history. Cleared when you close the tab |
| Google Maps address search (no cookie set by us) | none | Necessary | Loaded on event location forms and on the registrant address form when you buy a domain or website, to suggest addresses as you type. Google receives your IP address and what you type into the address field | |
sidebar_state |
Cookie (7 days) | Functional | First-party | Sidebar open/closed preference |
widgetList.collapsedFolders |
localStorage | Functional | First-party | Remembers which folders you collapsed in your list of calendars |
eventually:guestFeedCols:v1 |
localStorage | Functional | First-party | Remembers the column widths you set on a guest list |
eventually:onboarding:drawer:collapsed:* |
localStorage | Functional | First-party | Remembers whether you collapsed the first-run setup drawer (per team) |
eventually.styles-preview-type.*, eventually.styles-tip-dismissed.*, eventually.editor-tip-dismissed.* |
localStorage | Functional | First-party | Remembers, per user, which preview you chose on the styling pages and which tips you dismissed |
eventually.scanner.muted |
localStorage | Functional | First-party | Remembers that you muted the door scanner's check-in sounds on this device |
eventually:list-return:* |
sessionStorage | Functional | First-party | Brings you back to your place in the events list. Cleared when you close the tab |
banner-dismissed:* |
localStorage, sessionStorage | Functional | First-party | Remembers that you dismissed an announcement banner |
| EventWizard draft key | localStorage | Functional | First-party | Auto-saves your event draft so you don't lose it on refresh |
rootabl, rootabl.ref, _ruid, _rvid; _ruid, _rvid, _rttl, _rpv |
Cookies; localStorage and sessionStorage | Performance and Analytics | Rootabl | Affiliate referral attribution on the sign-up page and on our Squarespace extension install page and its account page, so that a partner who referred you can be credited. Rootabl's script runs in your browser on those pages and sets these; rootabl.ref records the partner. When the link that brought you to the extension pages names a partner we work with, we add that partner to the page's address so the script can read it. Not set anywhere else in the application, and not loaded at all without your consent |
| Page-view beacon (no cookie) | none | Performance and Analytics | Fathom Analytics | Cookieless analytics on application pages, signed in or not, including the consent screen an AI client sends you to. Stores nothing in your browser. Not loaded without your consent |
ev_referral |
Cookie (signed, 30 days) | Performance and Analytics | First-party | Referral attribution: records which link brought you to our Squarespace extension install page (the link's utm_ campaign values and the time you arrived, nothing else), so that when you create an account we can credit the partner or campaign that referred you, including Squarespace's Extension Store, and, when that partner offers a discount, apply it to your first paid subscription. Copied onto your account and deleted when the account is created, or deleted when you sign in to an account you already have. Not set without your consent. If you have not yet made a choice about Performance and Analytics and you install the extension in the same visit, this cookie is not set: we hold the link's utm_ values and the time on our server instead, tied to that install request and never stored in your browser, and copy them onto the account you create. They are used only if Squarespace approves the install within 15 minutes of that request and you then create your account within 25 minutes of that approval; otherwise they are not used. We delete the copy we hold for the install within about two hours of that request, whether or not it is used. We never hold them this way if you chose "Only necessary", and we do not copy them if you choose it before your account is created |
Public registration and event pages (/e/...)
These are the pages your event attendees see when buying a ticket or registering.
| Name | Type | Category | Set by | Purpose |
|---|---|---|---|---|
ev_cookie_consent_v1 |
Cookie | Necessary | First-party | Remembers your cookie-consent choice for 12 months (Safari limits cookies set by a page's script to 7 days, so there it can expire sooner) |
_eventually_session |
Cookie (session) | Necessary | First-party | CSRF protection and short-lived state. Expires when you close the browser |
XSRF-TOKEN |
Cookie (session) | Necessary | First-party | CSRF protection: a token our pages send back with each request, so another site cannot act in your name. Expires when you close the browser |
event_unlocks |
Cookie (encrypted, 7 days) | Necessary | First-party | Remembers the password or pre-sale access you entered for an event, so you are not asked again while you buy |
eventually:retry-order:* |
sessionStorage | Necessary | First-party | Remembers, per event and only until you close the tab, the order your last checkout attempt opened, so that if the attempt fails or you go back you can try again without being told you are already registered. Expires with the ticket hold |
__stripe_mid, __stripe_sid |
Cookies | Necessary | Stripe | Fraud prevention (only when Stripe checkout is open) |
m |
Cookie on m.stripe.com (third-party, about 13 months) |
Necessary | Stripe | Stripe's fraud-detection cookie, set by Stripe's own frame while Stripe checkout is open. Sent with cross-site requests (SameSite=None) |
| Stripe fraud-detection frame state | sessionStorage on m.stripe.network |
Necessary | Stripe | Kept by the same Stripe frame while Stripe checkout is open. Cleared when you close the tab |
| Squarespace Commerce cookies | Cookies | Necessary | Squarespace | Set only when checkout completes through the Customer's Squarespace cart |
| Page-view beacon (no cookie) | none | Performance and Analytics | Fathom Analytics | Cookieless analytics |
| Error and performance report beacon (no cookie) | none | Necessary | Sentry | Sends a report when something breaks, and page-load timing for a sample of visits, so we can fix failures. Stores nothing in your browser |
| Error report beacon (no cookie) | none | Necessary | Honeybadger | Sends a report when something breaks so we can fix it. Stores nothing in your browser |
blockFathomTracking |
localStorage | Necessary | First-party | Set by us when you turn Performance and Analytics off, so Fathom stays off. Removed when you turn that category back on |
ev-attendee-info |
localStorage (no expiry) | Functional | First-party | Pre-fills your name/email if you buy multiple tickets |
__cf_bm, cf_clearance |
Cookies | Necessary | Cloudflare | Bot management |
| Google Fonts (no cookie) | none | Necessary | Loads the event's typeface when its style uses a Google font. Your browser fetches it from fonts.googleapis.com and fonts.gstatic.com, so Google receives your IP address. Stores nothing in your browser |
Note that PostHog, Intercom, Google Analytics, and any advertising pixels are not loaded on public registration pages.
Public event series pages (/s/...)
These pages list the dates in an event series. Choosing a date takes you to that date's registration page, described above.
| Name | Type | Category | Set by | Purpose |
|---|---|---|---|---|
ev_cookie_consent_v1 |
Cookie | Necessary | First-party | Remembers your cookie-consent choice for 12 months (Safari limits cookies set by a page's script to 7 days, so there it can expire sooner) |
_eventually_session |
Cookie (session) | Necessary | First-party | CSRF protection and short-lived state. Expires when you close the browser |
XSRF-TOKEN |
Cookie (session) | Necessary | First-party | CSRF protection: a token our pages send back with each request, so another site cannot act in your name. Expires when you close the browser |
| Page-view beacon (no cookie) | none | Performance and Analytics | Fathom Analytics | Cookieless analytics |
blockFathomTracking |
localStorage | Necessary | First-party | Set by us when you turn Performance and Analytics off, so Fathom stays off. Removed when you turn that category back on |
| Error and performance report beacon (no cookie) | none | Necessary | Sentry | Sends a report when something breaks, and page-load timing for a sample of visits, so we can fix failures. Stores nothing in your browser |
| Error report beacon (no cookie) | none | Necessary | Honeybadger | Sends a report when something breaks so we can fix it. Stores nothing in your browser |
__cf_bm, cf_clearance |
Cookies | Necessary | Cloudflare | Bot management |
PostHog, Intercom, Google Analytics, and any advertising pixels are not loaded on series pages either.
Show pass pages (/r/...)
These are the pages a printed show pass opens: you enter the code printed on your pass, pick a show, and register for it.
| Name | Type | Category | Set by | Purpose |
|---|---|---|---|---|
ev_pass_hold |
Cookie (encrypted, 30 minutes) | Necessary | First-party | Remembers that the pass code you entered was accepted, so you can pick a show and register without typing it again. It names the pass by an internal number, never the code itself, and is deleted once you register or choose to use a different code |
__cf_bm, cf_clearance |
Cookies | Necessary | Cloudflare | Bot management |
Show pass pages load no analytics, no chat, no error-report scripts and no fonts from other sites. After you register you are taken to the registration confirmation page described above.
Ticket pages (/t/...)
These are the pages a ticket link opens: the ticket with its check-in code, and the page for transferring a ticket to someone else.
| Name | Type | Category | Set by | Purpose |
|---|---|---|---|---|
_eventually_session |
Cookie (session) | Necessary | First-party | CSRF protection and short-lived state. Expires when you close the browser |
XSRF-TOKEN |
Cookie (session) | Necessary | First-party | CSRF protection: a token our pages send back with each request, so another site cannot act in your name. Expires when you close the browser |
__cf_bm, cf_clearance |
Cookies | Necessary | Cloudflare | Bot management |
Ticket pages load no analytics, no chat, no error-report scripts and no fonts from other sites.
Embedded widget (iframe on Customer websites)
The widget is loaded as an iframe served from app.eventuallyticketing.com. All cookies and local storage set inside the widget are scoped to that domain. Eventually sets no cookies on the Customer's own website. A widget placed with our embed script keeps one kind of local storage entry on the Customer's own website, ev-seen:*, which holds only the value "1" and stops the embed from reporting the same page to us more than once from your browser; widgets placed through the Eventually extension do not keep it. On stores that use the Eventually extension for Squarespace, the extension's script keeps two kinds, both listed below. The first, ev-claim-*, is kept after a ticket is added to the cart so that the completed checkout can be matched to the right tickets; it holds a random token and the time it was kept, no personal data, and we stop honouring it after 90 minutes; an expired entry is removed the next time a ticket is added to the cart or the order confirmation page loads on that website. The second, evPanelSession:*, is kept only for the Customer's own staff, inside the Squarespace editor, after they choose to connect the Eventually panel there; it is never written on the pages the Customer's visitors see.
| Name | Type | Category | Set by | Purpose |
|---|---|---|---|---|
_eventually_session, XSRF-TOKEN |
Cookies (session) | Necessary | First-party | CSRF protection and short-lived state inside the widget frame. Expire when you close the browser |
ev_cookie_consent_v1 |
Cookie | Necessary | First-party | Read, not set, inside an embed, which shows no banner of its own. Your browser does not share this cookie with a widget embedded on another website, so inside an embed the widget applies the default for where you are (see the top of this Policy) rather than a choice you made on app.eventuallyticketing.com. When you open a widget page directly, it shows the banner and records your choice as our other pages do |
eventually:retry-order:* |
sessionStorage | Necessary | First-party | Remembers, per event and only until you close the tab, the order your last checkout attempt opened, so that if the attempt fails or you go back you can try again without being told you are already registered. Expires with the ticket hold |
event_unlocks |
Cookie (encrypted, 7 days) | Necessary | First-party | Remembers the password or pre-sale access you entered for an event, so you are not asked again while you buy |
ev-seen:* |
localStorage on the Customer's site (no expiry) | Necessary | First-party (Eventually embed script) | Holds "1" so the embed reports its placement on that page to us once per browser rather than on every page view. Kept only by widgets placed with our embed script, not by the extension. No personal data |
ev-claim-* |
localStorage on the Customer's site | Necessary | First-party (Eventually extension script) | Links your completed checkout to your tickets; honoured for 90 minutes. An expired entry is removed the next time a ticket is added to the cart or the order confirmation page loads on that website |
evPanelSession:* |
localStorage on the Customer's site | Necessary | First-party (Eventually extension script) | Keeps the Customer's staff signed in to the Eventually panel inside the Squarespace editor, after they choose to connect it. A signed token for that one site and that one user, which expires after 12 hours and is removed the next time the panel reads it after that. Never set for the Customer's visitors |
__stripe_mid, __stripe_sid |
Cookies | Necessary | Stripe | Fraud prevention (only when the widget's card payment step is open) |
m |
Cookie on m.stripe.com (third-party, about 13 months) |
Necessary | Stripe | Stripe's fraud-detection cookie, set by Stripe's own frame while the card payment step is open. Sent with cross-site requests (SameSite=None) |
| Stripe fraud-detection frame state | sessionStorage on m.stripe.network |
Necessary | Stripe | Kept by the same Stripe frame while the card payment step is open. Cleared when you close the tab |
__cf_bm, cf_clearance |
Cookies | Necessary | Cloudflare | Bot management |
| Google Fonts (no cookie) | none | Necessary | Loads the widget's typeface when its style uses a Google font. Your browser fetches it from fonts.googleapis.com and fonts.gstatic.com, so Google receives your IP address. Stores nothing in your browser |
|
| Error and performance report beacon (no cookie) | none | Necessary | Sentry | Sends a report when something breaks, and page-load timing for a sample of visits, so we can fix failures. Stores nothing in your browser |
| Error report beacon (no cookie) | none | Necessary | Honeybadger | Sends a report when something breaks so we can fix it. Stores nothing in your browser |
Email tracking
The emails we send may include tracking pixels and click-wrapped links to measure delivery, opens, and clicks. The vendors that handle this are:
- Postmark: transactional email to event registrants and Customer authorized users (registration confirmations, reminders, host broadcasts, password resets), and delivery reports for those emails (delivered, bounced, or marked as spam)
- Customer.io: lifecycle email to Eventually Customers (onboarding, product updates)
- Kit (formerly ConvertKit): Eventually's marketing newsletter and prospect lists
You can disable image loading in your email client to prevent open tracking, or unsubscribe via the link in any email you receive from us.
Third-party opt-outs
The third-party services we use offer their own opt-out mechanisms:
- Google Analytics: install the official opt-out add-on at https://tools.google.com/dlpage/gaoptout
- PostHog: see https://posthog.com/docs/privacy for opt-out details
- Fathom Analytics: cookieless, and it stores nothing in your browser; turning Performance and Analytics off stops it loading on our pages
- Intercom: sign out of the application; Intercom is not loaded when you're not signed in
- Stripe: fraud-prevention cookies are only set on the pages where you pay or enter a card
- Cloudflare: see https://www.cloudflare.com/privacypolicy
Managing cookies in your browser
You can manage cookies directly in your browser:
- Chrome: https://support.google.com/chrome/answer/95647
- Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471
- Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
Blocking strictly necessary cookies will break authentication and other core functionality.
Your consent choices
Whether you see a banner first, or are treated as consented until you say otherwise, depends on where you are. See "Your choices, and how they work where you are" at the top of this Policy.
Your choice takes effect immediately. If you turn a category off, the technologies in that category do not load at all, rather than loading and then being ignored, and the cookies they had already set are deleted. Signed-in users can change their choice at any time under "Cookie preferences" in the user menu. Everyone can change it at app.eventuallyticketing.com/cookies.
Do Not Track
We currently do not respond to Do Not Track browser signals; the choices described above are the supported way to control non-essential cookies. Our marketing website is hosted on Squarespace and uses Squarespace's own cookie banner, which offers its own categories and controls.
Advertising and behavioral tracking
We do not serve interest-based advertising and we do not build behavioral profiles across other companies' websites. Specifically, we do not use Facebook/Meta Pixel, Google Ads, DoubleClick, LinkedIn Insight Tag, TikTok pixel, X/Twitter pixel, or any retargeting cookies.
We do run affiliate referral attribution (Rootabl and our own ev_referral cookie, both listed in the tables above), which records which partner referred you so that partner can be credited. We treat this as measurement rather than advertising, because it does not serve you ads, does not build a profile of you, and is not used to target you anywhere. It is non-essential, so nothing for it is stored in your browser without your Performance and Analytics consent. The one thing we keep without that consent is the short-lived record on our server described in the ev_referral row, for a visitor who has not yet made a choice and installs our Squarespace extension in the same visit, and never for a visitor who chose "Only necessary". On our Squarespace-hosted marketing site, Squarespace's banner groups it under Advertising instead; that grouping is theirs and we cannot change it.
Changes to this Policy
We may update this Cookie Policy as our use of cookies and similar technologies changes. The "Last Updated" date at the top reflects the most recent revision. Material changes will be notified through the App or by email.
Contact
If you have questions about this Cookie Policy, contact us at:
Eventually Ticketing Inc.
1750 W Julian Street #4
Chicago, IL 60622, United States
[email protected]
(630) 244-5357