What we collect and why.

When you join a queue we collect:

• Your first name (you give it to us — no surname).
• A selfie (so the marshal at the door can match your face).
• Your device's rough location (so we can confirm you're actually at the venue).
• An anonymous device fingerprint (so the same phone can't grab two spots).
• Your IP address (used only for rate-limiting and abuse detection).

We do NOT collect:

• Your full name, email or phone number (staff have these, customers don't).
• Card or payment details (we're not a payment processor).
• Location data after you've joined (the geofence is one-shot at scan time).

How long we keep your data:

Your photo and joining record are deleted automatically 30 days after the drop closes. The audit log (anonymised: position number, time, status) is kept indefinitely so disputes can be resolved later.

Your rights (GDPR):

Email privacy@swatchqueue.com and we'll delete your photo and personal record within 30 days. The audit log is redacted so it no longer identifies you.