Privacy Policy

When you buy a ticket:

• ▸Your first and last name, email address, and phone number if you give us one.
• ▸What you bought — which show, which tickets, what you paid, and your confirmation code.
• ▸Whether your ticket has been scanned at the door, and when.

When you join our mailing list, sign in to the wifi, or send us a form:

• ▸Your name, email address, and phone number if you give us one.
• ▸Your ZIP code and your birthday — month and day only, never the year — if you choose to give them.
• ▸Whether you've said yes to marketing emails and texts.
• ▸Whatever you write in the message itself, for enquiries about groups, private events, VIP tables and band submissions.

When you use the guest Wi-Fi:

• ▸Your device's Wi-Fi address — the identifier your phone gives out to join any network. We keep it so we can recognize your phone next time and let you straight back on instead of making you fill the form in again.
• ▸Which of our access points you connected through, and which of our networks you joined.
• ▸The date and time you connected, and a running count of how many times you've been in.

We don't inspect or record what you browse, download, or type while you're connected. Our network equipment keeps ordinary connection records — when a device joined and left, and how much data it moved — the same as any Wi-Fi does.

If you'd rather not be recognized, tap the “not you?” link on the sign-in screen, or leave your phone's private or randomized Wi-Fi address setting switched on. Most phones do that by default, and it genuinely works — we just see a new device.

We never see or store your card number. Card details go straight to Stripe, our payment processor, and are handled entirely on their systems. What comes back to us is the amount, whether it worked, and the last four digits.

We advertise our shows on Facebook and Instagram, and we use Meta's pixel on this site so we can tell which of those posts and ads actually brought people here. That is the one advertising tool we use, and here is exactly what it does.

• ▸The pixel tells Meta which pages you looked at on this site, including which show, and sets two Meta cookies in your browser so it can tell one visit from the next.
• ▸When you buy a ticket, sign up for our list, or sign in to the guest Wi-Fi, we also tell Meta that it happened, from our own server. Before that goes out, your email, phone number, first name and ZIP are scrambled with a one-way hash, so Meta gets a fingerprint it can match against its own users rather than your details in the clear. We never send Meta your card details, what you wrote in a form, or your Wi-Fi device address.
• ▸Meta uses this to show us which posts sold tickets, and to let us show ads for a show to people who looked at it or who have been here before. That is targeted advertising, and you can turn it off.

To opt out: switch on Global Privacy Control in your browser, or use a browser or extension that blocks trackers. If your browser sends the Global Privacy Control signal, the pixel does not load and our server does not report you to Meta — no email or form needed. You can also control what Meta does with data from other sites in your Facebook settings under “Your activity off Meta technologies.”

We don't run Google Analytics or any other analytics or advertising trackers. We don't sell your information, and Meta is not permitted to use what we send it for anyone's advertising but ours.

The guest Wi-Fi above is the one place we hold something about your device rather than about you, and it's worth being clear about the difference. Joining any Wi-Fi anywhere means handing the access point your device's address; what we do with ours is remember it so a regular isn't retyping their email every weekend, and count how busy the room was. The device address stays on our own systems and is never sold or shared. The contact details you type on the sign-in form are treated like any other signup, including the hashed report to Meta described above.

• ▸To sell you a ticket, email you your confirmation, and let you in at the door.
• ▸To find your order when you call us, resend a receipt, or process a refund.
• ▸To tell you if a show you bought for is cancelled or moved — we'll send these whatever your marketing settings say, because you need to know.
• ▸To send you show announcements and offers, if you've asked for them.
• ▸To answer enquiries you send us, and to hire people who apply.
• ▸To recognize your phone on the guest Wi-Fi so you're not filling the same form in on every visit, and to know how busy a night actually was.
• ▸To keep the books straight, meet our tax and alcohol-licensing obligations, and deal with chargebacks and fraud.

We don't sell your information, rent it, or trade it. A short list of companies handle it for us:

• ▸Stripe — processes card payments and holds the card details we never see.
• ▸Google Firebase — hosts our database and keeps staff accounts secure.
• ▸SendGrid — sends our confirmation emails and newsletters, and receives your replies.
• ▸Twilio — sends the text messages described under "If you work here", and the sign-in codes for the staff schedule. Only staff numbers ever reach it.
• ▸Meta (Facebook and Instagram) — receives page views from the pixel and hashed contact details when you buy, sign up, or join the Wi-Fi, so we can measure and target our own advertising. See the section above for what it gets and how to opt out.

Each of them is bound to use your details only to provide that service to us, and they each have their own privacy policy.

Our own staff see your name and order on the door list so they can check you in. Beyond that we'll only hand your details over if the law requires it — a subpoena, a court order, or an ABLE Commission or tax enquiry — or if we need to defend ourselves in a dispute.

Touring artists sometimes ask for attendance figures. What they get is counts and totals, never names, emails or phone numbers.

Staff give a manager their mobile number when they are hired, for scheduling. We use it for two things: to text you a sign-in code for the staff schedule when you ask for one, and to text you about your own shifts — the answer to a time-off or shift request you made, and a note that the week's schedule is posted. Nothing else, and never marketing.

Staff mobile numbers are not shared with anyone for marketing or promotional purposes, and are not sold or handed to third parties, other than the company that carries the text on our behalf. Reply STOP to any schedule text to stop them; reply HELP for help. When you leave, a manager marks you as left and the texts stop the same day.

Texts from us are sent by Hochatown Saloon LLC, trading as Hochatown Saloon. There are two kinds, and you only ever get one because you asked for it: the staff messages described above, and a single “your table is ready” note if you gave the host your number while you were waiting for a table.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. The only outside company that sees the number is the one that carries the message for us.

Message and data rates may apply. How often you hear from us depends entirely on your own shifts or your own table, so there is no set schedule. Reply STOP to any of these to stop them, or HELP for help. Stopping them has no effect on your job, your booking, or your place in the queue.

We only send marketing to people who asked for it — by ticking the box at checkout, signing up on the site, or opting in on the wifi page. We don't add ticket buyers to the mailing list automatically.

Every marketing email has an unsubscribe link at the bottom, and one click is all it takes. To stop texts, reply STOP or tell us. Unsubscribing doesn't affect confirmations, receipts, or notices that a show you bought for has changed — those aren't marketing and you'll keep getting them.

We keep order records for seven years, because tax and licensing rules require it. Contact details for marketing stay until you unsubscribe or ask us to delete them. Enquiries and form messages are kept while we're dealing with them and for a reasonable period after, and job applications are kept for a year unless you ask us to bin them sooner.

Guest Wi-Fi records — the device, when it connected, and how many times — stay until you ask us to delete them, or until you unsubscribe and ask us to clear you out entirely.

Whatever state you live in, you can ask us to:

• ▸Tell you what we hold about you.
• ▸Send you a copy of it.
• ▸Correct anything that's wrong.
• ▸Delete it — we'll do that unless we're legally required to keep an order record, in which case we'll delete everything else and tell you what we kept.
• ▸Stop sending you marketing.

Deleting your details takes the Wi-Fi device record with it. The next time you connect, we won't know you, and you'll just be asked to sign in like anybody else.

Email Hochatownsaloonofficial@gmail.com and say what you want. We'll confirm you're you — usually by replying to the address we already have — and deal with it within 45 days. It's free, and we won't treat you any differently for asking.

California, Colorado, Connecticut, Texas, Virginia and a growing number of other states give residents specific versions of these rights, including the right to opt out of sale or targeted advertising. We don't sell personal information. We do use the Meta pixel for targeted advertising as described above, and the Global Privacy Control signal opts you out of it; so does emailing us. We extend the rights above to everyone rather than asking where you live.

Your details sit in Google Firebase behind access rules, encrypted in transit and at rest. Card numbers never touch our systems. Admin accounts are individually issued, permission-limited, and logged, so we can see who looked at what.

No system is perfectly secure and anyone who tells you otherwise is selling something. If we ever have a breach that affects your information, we'll tell you and the relevant authorities as the law requires.

This site is for adults buying tickets and making reservations, and we don't knowingly collect information from anyone under 13. When a parent or guardian buys an Under-21 ticket, they're the one giving us their details — we don't collect anything about the young person beyond the ticket itself. If you think a child has given us their information, email us and we'll delete it.

We link out to other places — our online ordering, cabin bookings, and our Facebook and Instagram pages. Once you're on somebody else's site you're under their privacy policy, not ours, and we can't answer for what they collect.

If we change how we handle your information, we'll update this page and change the date at the top. For anything significant we'll say so by email to people on our list rather than quietly editing the page.

Email Hochatownsaloonofficial@gmail.com or call (580) 494-3300. For anything about a specific ticket, our ticket terms cover the rules of sale.

Hochatown Saloon, 28 Old Hochatown Rd, Broken Bow, OK 74728.