Who can see what

• Your account sees only your sites, domains, pages and tickets. Another club cannot reach them, including by guessing a ticket reference.
• Sneeze It staff can see every account. That is how support works, and it is the reason a support request can be answered without asking you for screenshots.
• An API key is scoped to the account that created it.

Card and bank details never reach iJoin at all. They go from the person to the checkout directly, which is why we cannot show them to you and cannot leak them.