Privacy Policy for Viewers

Last updated: October 8, 2026

EventScreen is operated by Kinecio LLC (Kinecio, we, us), registered in Kansas, United States. This policy explains what information we collect about viewers, why we collect it, who we share it with, and what rights you have. Organizers who publish events should read the separate Organizer Privacy Policy.

1. Information we collect

When you buy a ticket we collect the email address you provide, the event and amount, and the payment status. We do not see or store your card number; payment details go directly to Stripe.

When you sign in to watch on the web or in an app, we keep a session identifier tied to your browser or device so we can recognize your purchases and enforce the one-active-session rule. On the web this identifier lives in your browser’s local storage; in our apps it lives in the app’s own storage.

Advertising. Free events can show an ad before the stream, and some public pages load Google’s advertising scripts. When they do, Google collects information from your browser or device, such as your IP address, cookie and device identifiers, and the pages and ads you view, under its own policies. See section 4 and the Cookie Information. If you choose generic ads, or make no choice, the ad is requested as non-personalized.

Technical data. Our servers log the basics needed to run the service and stop abuse: IP address, browser and device type, and the time of each request. We use this for security and to keep the platform working, not to build profiles of you.

2. How we use your information

• to sell tickets, confirm purchases, and give you the access you paid for;
• to send purchase confirmations and service notices by email;
• to prevent fraud, piracy, and abuse of the platform;
• to show ads on free events and public pages, which help pay for free events;
• to keep records the law requires, such as tax records for sales.

3. Legal basis (for people in the EU, UK, and similar regions)

• Contract: providing you the tickets and watch access you asked for.
• Legitimate interests: securing the platform and preventing fraud and piracy.
• Legal obligation: tax and accounting records.
• Consent: we ask for consent before any processing that requires it. You choose whether ads are tailored to you, and nothing is tailored until you say yes. We would also ask before any optional marketing email.

We do not sell or rent personal information. We do not use what you give us when you buy a ticket, such as your email address, for advertising. The ads shown on the platform are served by Google, which collects its own information as described in section 4.

4. Who we share information with

We share information only with the service providers needed to run the platform:

• Stripe processes payments. Its privacy policy applies to the payment pages it hosts.
• Resend sends our transactional email (purchase confirmations and sign-in links).
• Cloudflare provides our content delivery network and object storage for streams and recordings.
• Google (Google Ad Manager and AdSense) serves the ads on free events and loads its script on public pages. Google acts under its own privacy policy and its policy on how it uses information from sites that use its services. You can control ad personalization at adssettings.google.com.
• Cloud hosting providers run the application, its database, and the per-event streaming pipeline.

Each provider gets only what it needs to do its job, under contracts that require them to protect the data. We also disclose information when the law requires it, or to protect our rights or the safety of our users.

5. International transfers

Kinecio is based in the United States and our providers process data there and in other countries. When we transfer personal data out of the EU, UK, or other regions with transfer rules, we rely on standard contractual clauses or equivalent safeguards.

6. Retention

• Event recordings are kept only for the retention period the organizer chose for the event (7 days by default after the event ends), then deleted.
• Purchase records are kept as long as the law requires for tax and accounting purposes. If you delete your account, we remove your email address from these records and unlink them from you. Our payment processor, Stripe, keeps its own records under its own policy.
• Sign-in tokens expire within minutes; sessions stay active until you sign out or we revoke them.
• Optional usage and diagnostics from the Android apps (section 11) are deleted after 90 days, and when you delete your account.
• Backups of our servers may retain data for a short additional period before they are overwritten.

7. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, to object to or restrict certain processing, and to receive a copy of your data in a portable form. If you live in a US state with a consumer privacy law, including Kansas, you also have the right to know what we collect, to ask us to delete it, and to opt out of any sale, which we do not do. We do not discriminate against you for exercising these rights.

You can delete your account yourself. Sign in on the account page, or choose Delete account on the Account screen of the EventScreen app. Deleting signs out every device, removes the organizations you follow and your sign-in history, ends any subscription, and removes tickets and bundles linked to the account, so they stop working. It cannot be undone. If you are the only owner of an organization, add another owner first. The steps, and what we delete and keep, are also on the delete account page.

To exercise any other right, email [email protected]. We will verify your identity and respond within the time the law requires. If you are in the EU or UK and think we have not handled your request properly, you can complain to your local data protection authority.

8. Children

EventScreen is not directed at children. You must be at least 18 to buy a ticket. We do not knowingly collect personal information from children under 13, or under 16 where that is the local digital-consent age.

9. Security

We use encryption in transit, signed and expiring access tokens for streams, and restricted access to our servers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. The iPhone, iPad, and Apple TV apps

The EventScreen apps let you sign in, follow organizations, and watch events your account can watch. Everything else in this policy applies to them too. This section covers what is specific to the apps, including the Apple TV app.

What the apps collect. Your email address when you sign up or sign in. A random identifier the app creates when you install it, and a session identifier, both kept in the app’s own storage. We use them to keep you signed in, to enforce the one-active-session rule, and to know which kind of device (iPhone, iPad, or Apple TV) is signed in. We also hold what your account can watch, such as tickets, subscriptions, bundles, and the organizations you follow. When you press Watch, the app asks our server for a signed link to the stream, and our servers log the request as described in section 1.

Signing in on Apple TV. The TV shows a QR code and a short code. You confirm the sign-in on your phone or at eventscreen.net/pair, and the TV signs in. The short code stops working after 10 minutes. You do not enter your email or a password with the TV remote.

What the apps do not do. They do not track you across other companies’ apps or websites, do not read the advertising identifier, and do not ask for App Tracking Transparency permission. They contain no third-party analytics, advertising, or crash-reporting code. They do not use your location, contacts, photos, camera, or microphone.

Ads in the apps. An event can show an ad before the stream. In the apps this is the organizer’s own ad, delivered from EventScreen’s servers, and the app reports to EventScreen that it played. The apps do not load Google’s advertising code and do not show personalized ads. Streams are delivered through Cloudflare, which sees your IP address as it would for any request it serves.

Your data in the apps. Signing out ends the session on that device. To ask us to delete your account or your data, email [email protected] (see section 7).

11. Optional usage and diagnostics in the Android apps

The Android apps (phone, Android TV, and Fire TV) have a setting called “Share usage and diagnostics” on the Account screen. It is off until you turn it on, and you can turn it off again at any time. The iPhone, iPad, and Apple TV apps do not have it and do not collect this information.

What is sent when it is on. The screens you open, and the organization or event page when it is one (for example, which organization’s page you viewed). Actions such as following or unfollowing an organization. What you type into the search boxes, once you stop typing. Crash reports and error messages from the app. Playback information, such as how long a stream took to start and playback errors. Network problems, such as a request that failed or took longer than three seconds, with the name of the service endpoint but not the full address. With each batch the app sends its random install identifier, the type of device (Android phone, Android TV, or Fire TV), and the Android version. If you are signed in, we link the information to your account.

What it is used for. Finding and fixing bugs, crashes, and slow or failing playback, and seeing which parts of the app are used. We do not use it for advertising, we do not sell it, and we do not share it with anyone. It is sent to our own servers, not to a third-party analytics or crash-reporting company. Errors are cleaned of web addresses before they are sent, so a playback link and its access token are not included. Native crashes that the Android system handles on its own are not captured; only errors in the app’s own code are.

Keeping it, and removing it. The information is stored for 90 days and then deleted. Turning the setting off stops anything further from being sent and discards what the app had not yet sent. Deleting your account deletes the information linked to it, along with the information sent from your devices before you signed in. To ask us to remove information already sent, email [email protected].

12. Changes to this policy

We may update this policy. When we do, we change the date above and, for material changes, tell you on the platform or by email.

13. Contact