Cookie policy
This page is available in English only. The English version prevails.
1. What cookies are
A cookie is a small file a site asks your browser to keep and send back on the next
request. localStorage does a similar job but is never sent anywhere — the
page reads it directly. Both are covered here because, from your point of view, both
are "things the site remembers about you".
2. What we keep in your browser
Alongside the cookies below, five keys live in localStorage. These stay on your machine and are never transmitted:
| Key | What is in it |
|---|---|
| tickyo.user | Display name and email of the signed-in account |
| tickyo.orders | Your orders, with ticket tier and amount |
| tickyo.favs | Event IDs you set an on-sale reminder for |
| tickyo.addressbook | Saved delivery and billing addresses, keyed by account email |
| tickyo.notify | Which notification toggles you switched on |
No card number is ever stored — the checkout form does not keep what you type into it. Nothing above leaves your browser.
Check it yourself
- Open your browser's developer tools (F12)
- Go to Application › Local storage
- Pick this site and read the tickyo.* keys
3. Cookies we set
These are what the site needs to keep you signed in and take payment safely:
| Name | Type | Purpose | Life |
|---|---|---|---|
| tk_session | Essential | Keeps you signed in between pages | Session |
| tk_cart | Essential | Holds your seat selection while you complete checkout | 2 hours |
| tk_csrf | Security | Stops another site submitting forms as you | Session |
| tk_ratelimit | Security | Detects bulk buying and bot traffic at on-sale time | 24 hours |
| tk_locale | Preference | Remembers language and currency | 12 months |
| tk_analytics | Analytics | Counts page views in aggregate; optional | 13 months |
The essential and security rows cannot be switched off — without them you cannot stay signed in or complete a purchase. The last two are optional and would sit behind a consent banner in markets that require one.
4. Third parties
We load one external resource for presentation: Google Fonts, for the Inter and JetBrains Mono typefaces. Google may log the request.
When we are running ads we also load the advertising platform's measurement tag — Google Ads and Meta (Facebook) — so that the platform can tell which ad led to a booking. These set their own cookies and can read the click identifier that the ad added to the link you arrived on. They fire on every page and once more when an order is submitted, carrying the order number, amount and currency. No session recorders, and nothing that reads what you type.
At checkout the payment provider's script loads and sets its own cookies for fraud scoring, which is what lets it tell a real cardholder from a stolen card. Those are essential to taking payment.
5. Controlling and clearing them
- Clear this site's data — in most browsers, click the padlock in the address bar, then "Cookies and site data" › "Manage on-device site data". This signs you out you out and removes saved orders and addresses.
- Block everything — your browser can refuse storage entirely. The site is built to survive that: every read and write is wrapped so a refusal degrades gracefully rather than breaking the page. You will just not stay signed in.
- Private window — everything is discarded when you close it.
Clearing browser storage only removes the local copy. Your orders stay on your account and reappear when you sign in again.
6. Do Not Track
We honour Global Privacy Control and treat it as a refusal of the optional analytics cookie. Nothing else here tracks you across sites.
See also the privacy policy and terms of use.