Email control is not physical identity
A verified account shows control of an email address. It does not prove one unique person. The service checks account and email reuse within a campaign, but does not provide identity-document checks or guaranteed bot detection.
A partner record is a documented assertion
Artist teams provide authorized purchases, attendance and membership records. The service validates record format, artist scope, dates and policy requirements. It does not independently query a ticket vendor to confirm every uploaded row. The source and authority of the record matter.
Eligibility is a rule-bound decision
The server applies the campaign’s frozen policy. A qualifying claim receives a pass if allocation remains. Missing records go to review; full allocation leads to a waitlist. A partner cannot turn arbitrary profile or quiz data into a qualifying signal through the browser.
An access token has a limited purpose
A signed token carries a campaign, policy binding and expiry. Authorized operators check current status, including redemption, revocation and withdrawal. It is a bearer credential, not a ticket, a guarantee of purchase or a portable lifetime fan badge.
Consent and retention need an operating process
Fans see the evidence requirements and opt in before evaluation. Imported email addresses are replaced with campaign-specific keyed hashes. Current claim evidence can be withdrawn; minimal claim records and audit explanations are retained until the stated deadline. Daily cleanup begins after pass expiry plus 30 days. Partner source records and backups need their own approved handling.