Information we collect
- Account data: name, email address, password hash, session information, and security logs.
- Listing data: product title, description, logo, destination website, public handle, and time remaining.
- Purchase data: Stripe Checkout and event identifiers, amount paid, credited hours, and fulfillment time. TickTick does not receive or store complete card numbers.
- Click analytics: click time, referring source, and listing rank at click. To estimate unique visitors, TickTick creates a one-way hash from the IP address and browser user agent using a salt that changes the result by day; the click record does not store the raw IP address or full user agent.
- Live presence: a random first-party browser ID and last-seen time used only to calculate the public live visitor count. The ID is stored in an HttpOnly cookie, is not connected to an account, IP address, or click history, and inactive records are removed from the count within a minute.
- Technical data: cookies, request logs, device and browser information, and IP addresses used for authentication, fraud prevention, and service security.
How we use information
We use information to authenticate users, process and fulfill purchases, publish listings, count clicks, provide analytics, prevent abuse, respond to support requests, maintain the service, and comply with legal and financial obligations.
Cookies
TickTick uses essential session cookies to keep users signed in. A short-lived first-party source cookie may remember the referring website for aggregate click attribution. An HttpOnly first-party presence cookie keeps multiple tabs from inflating the live visitor count; it does not contain account or click-history data. We do not use third-party advertising cookies on ticktick.lol.
Service providers
We share only the information needed for vendors to provide their services. Stripe processes payment and fraud-prevention information. Railway hosts the application, PostgreSQL database, and product-logo storage. These providers process data under their own terms and privacy commitments. We may also disclose information when legally required or needed to protect users, TickTick, or the public.
Public information and outbound links
Product titles, descriptions, logos, handles, time remaining, ranks, and aggregate click totals are public. Clicking a listing sends the visitor to the owner’s website, whose privacy practices are controlled by that website and not TickTick.
Retention and choices
We retain account, listing, click, purchase, and security records for as long as reasonably needed to operate the service, resolve disputes, prevent fraud, and meet legal or accounting obligations. You may ask to access, correct, or delete personal information. Some financial or fraud-prevention records may need to be retained after an account is deleted.
Security and age limits
We use reasonable technical and organizational safeguards, but no internet service can guarantee absolute security. TickTick is not directed to children and is available only to people who are at least 18 years old.
Privacy contact
For a privacy request or question, email hello@ticktick.lol from the address associated with your account. We may need to verify the request before acting on it.