Privacy Policy
This policy explains what personal data ticklestrading.com ("Tickles", "we", "us") collects, why we collect it, how we use cookies, and the rights you have. Last updated 2026-05-07.
1. Who we are
Tickles is operated by Talist (contact: [email protected]). The data controller for personal data collected via this website is Talist.
2. What we collect
2.1 Information you give us
- Account data — when you sign up: email address, optionally a password, and broker account number you choose to license.
- Contact data — when you email us or use a contact form: name, email, message contents.
- Affiliate / partner data — when applying to our affiliate program: name, contact details, payout preferences.
2.2 Information collected automatically
- Server logs (Hostinger): IP address, request URL, user agent, timestamp. Used for security and troubleshooting; retained ~30 days.
- Analytics (only if you accept analytics cookies): page views, clicks, scroll depth, device and browser type, approximate location (country/region from IP). Collected via Google Analytics 4 and Microsoft Clarity (the latter also captures anonymized session recordings).
3. Cookies and similar technologies
We use a consent banner on first visit. Until you accept analytics cookies, no analytics or marketing scripts run. You can change your choice anytime: Open cookie settings.
| Category | Provider | Purpose | Retention |
|---|---|---|---|
| Strictly necessary | Tickles | Stores your cookie consent choice (tickles_consent_v1) and authentication session if you log in. |
Consent: 12 months. Session: until logout. |
| Analytics | Google Analytics 4 (Google Ireland Ltd) | Aggregate page views, events, and traffic sources to understand site usage. | Up to 14 months |
| Analytics | Microsoft Clarity (Microsoft Corp.) | Heatmaps and anonymized session recordings to diagnose UX issues. | Up to 13 months |
| Tag management | Google Tag Manager (Google Ireland Ltd) | Loads and manages the analytics tags listed above. Does not itself set tracking cookies. | Session |
| Marketing | (none enabled today) | Reserved for future advertising tags. Currently no marketing cookies are set even if you opt in. | — |
4. Legal basis (EEA / UK)
- Consent (GDPR Art. 6(1)(a)) — analytics and marketing cookies, marketing emails.
- Contract (Art. 6(1)(b)) — to provide the EA license and account services you sign up for.
- Legitimate interests (Art. 6(1)(f)) — to operate, secure, and improve the website (server logs).
5. How we use the data
- Provide and maintain the Tickles service and your account.
- Respond to support requests and contact-form submissions.
- Understand site usage in aggregate to improve the product.
- Comply with legal, tax, and regulatory obligations.
6. Sharing
We share data only with the processors needed to run the site:
- Hostinger — web hosting and server logs.
- Supabase — backend database for accounts and license validation.
- Google — Tag Manager and Analytics 4.
- Microsoft — Clarity (analytics, session replay).
- Email providers — for transactional and support email.
We do not sell your personal data.
7. International transfers
Some processors (Google, Microsoft) may transfer data outside the EEA/UK. They rely on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework as the transfer mechanism.
8. Your rights
If you are in the EEA, UK, or California, you have the right to:
- access the personal data we hold about you;
- request correction or deletion;
- withdraw consent at any time (for analytics, via the cookie settings);
- object to processing based on legitimate interests;
- request data portability;
- lodge a complaint with your local data protection authority.
To exercise any of these rights, email [email protected]. We respond within 30 days.
9. Data retention
Account data is kept while your account is active and for up to 24 months after closure (for tax and regulatory reasons). Analytics data follows the retention windows in section 3. Server logs are kept ~30 days. Support email threads are kept up to 24 months.
10. Children
The site is not directed to children under 18. We do not knowingly collect personal data from minors.
11. Changes to this policy
We may update this policy as the product or our processors change. Material changes will be announced on the site. The "last updated" date at the top reflects the most recent revision.
12. Contact
Questions or requests: [email protected].
This policy is provided for transparency and to support GDPR/CCPA compliance, but it is not legal advice. Have a lawyer review it before publishing if you operate in regulated jurisdictions or scale internationally.