Cookies and storage

LMH Tickets uses only what’s needed to make the site work, so there’s no cookie banner: no analytics, advertising or tracking cookies.

lmh_session: keeps you signed in if you have an organiser or staff account (ends when you sign out, or after 12 hours; 4 hours on the operator console).

lmh_csrf: a security token that stops other websites making requests as you. Same lifetime as your sign-in.

While you buy tickets, your browser keeps a private link to your order for that tab only, so you can see your tickets straight after paying. It’s cleared when you close the tab.

If you’re door staff, the scanner app keeps the event’s ticket list and your PIN on the phone so it works without signal. It’s removed when the event ends or the device is signed out.

Cloudflare Turnstile may run a quick security check on sign-up, checkout and order help to tell people from bots. Cloudflare doesn’t use it for advertising.

Card payments happen on Stripe’s own checkout pages (checkout.stripe.com), which use their own cookies for fraud prevention under Stripe’s privacy policy.