Doorstub privacy

Updated October 1, 2026. This page adds Doorstub's details to the Great Work add-on privacy policy, which covers licensing and payments.

What stays in your Google account

Your guest list, the columns Doorstub adds, the check-in log and the attendance sheet all live in your spreadsheet. Ticket emails are sent by Google from your own account; their contents never pass through Great Work.

Google data Doorstub uses

Doorstub's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell data, use it for ads, or let people read it.

Phone scanning (optional)

When you turn it on, Doorstub builds the list the phones need (ticket code, name, which sessions it opens, cancelled or not, already checked in or not; no email addresses or other columns), and encrypts it inside Google Apps Script with a random key. The key exists only in your sheet's settings and in the scanner link after the # sign, which browsers never send to a server. We can't read the list.

Our service stores: that encrypted list; the event code; your Google account email; a fingerprint of the scanner key; and each check-in (ticket code, session, time, and the name the staff member typed). It is deleted when you turn phone scanning off, or after 90 days without activity. Making a new scanner link stops old links at once.

The scanner page loads no third-party scripts and sets no cookies. It keeps the encrypted list and any scans waiting to sync in the phone's browser storage.

Ticket packs

We keep your ticket balance and a record of purchases and spends (counts only) against your Google account email. Stripe processes payments; we never see card numbers.

Deleting your data

Turn off phone scanning in the Door tab to delete the event from our service. Email hello@greatwork.company to delete your license and pack records.