Privacy Policy
tickwise@tickwise.tech.
1. What we collect, and when
Email signup form
If you submit the form at tickwise.tech, we collect and store:
| Field | Why |
|---|---|
| Email address | To send the one-time confirmation email and, in the future, infrequent project milestone notifications. |
| IP address | Rate-limiting (5 requests / minute) to prevent spam-floods of the signup endpoint. |
| User-Agent string | Diagnosing browser-compatibility issues if a signup fails. First 300 characters only. |
| HTTP Referer | Understanding which page or external link drove the signup. First 300 characters only. |
| Timestamp | Knowing when the signup happened. |
This data is stored in a single append-only file on the operator's VPS. It is not shared with any third party other than AgentMail (which receives only your email address, in order to send the confirmation).
Browsing the site
We do not run analytics, tracking pixels, or third-party scripts. The site has zero cookies. Our reverse proxy (Caddy) logs standard HTTP access information (IP, timestamp, requested path, response code, User-Agent) for the purpose of operating the server — these logs are rotated and discarded after 30 days, and are never analyzed for behavioral profiling.
Public communication channels
If you interact with our X account (@TickwiseTech) or Telegram channel (@tickwisetech) or chat group, that interaction is governed by the respective platform's own privacy policy. We do not collect, scrape, or process data about other X / Telegram users beyond what those platforms display publicly on our own posts.
Open-source software
If you self-host the TickWise software, the software runs on your own infrastructure and the operator never sees the data it produces. The "Builder code" attribution mechanism (see homepage) transmits only your aggregate trading volume to Polymarket, which Polymarket aggregates across all users of the same builder code — no per-user information is exposed to the operator.
2. What we do NOT collect
- Names, phone numbers, mailing addresses, payment details, or financial accounts
- Behavioral analytics, scroll heatmaps, session recordings
- Cross-site tracking identifiers, advertising IDs, fingerprints
- Cookies of any kind (including third-party / functional / preference cookies)
- Data about other X, Telegram, or GitHub users
- Your wallet private keys, Polymarket account credentials, or trading positions
3. Where we store data
Email-signup data is stored as an append-only file (subscribers.jsonl) on a virtual private server operated by the project owner. The server is located in Bucharest, Romania (BitLaunch). Access to the server requires the operator's SSH key — no password authentication is enabled. The signup file is readable only by the application user (www-data) and the operator (root).
4. How long we keep data
| Data | Retention |
|---|---|
| Email signup records | Until you request deletion, or until the project is wound down. |
| Caddy access logs (IP, timestamp, path) | Rotated and deleted after 30 days. |
| Outbound tweet IDs | Indefinite (used for dedupe — no personal data, just our own tweet IDs). |
| Outbound Telegram message IDs | Indefinite (same purpose). |
5. Who else gets your data
Other than the third parties listed below (each acting strictly as a data processor for the limited purpose described), we do not share, sell, license, rent, or otherwise transfer your personal data to anyone.
| Processor | What they receive | Why |
|---|---|---|
| AgentMail (Amazon SES backend) | Your email address | To send the one-time confirmation email and future project notifications. |
| BitLaunch (VPS host) | The encrypted block storage your signup record lives on | They host the server; they do not access the data. |
| Let's Encrypt | The domain name tickwise.tech only | To issue and renew the TLS certificate. |
6. Your rights
Wherever you live, you can:
- Access — email us at tickwise@tickwise.tech and we'll send you a copy of whatever data we hold tied to your address (typically just your signup record).
- Delete — email us with the subject
DELETEfrom the address you signed up with, and we'll remove your record within 7 days. - Correct — same email path. Tell us what's wrong, we'll fix it.
- Opt out — reply
UNSUBSCRIBEto any project notification email, and we'll stop sending them. - Object / withdraw consent — same as Delete. We process your data on the basis of your consent (you submitted the form); withdrawing that consent means we delete the record.
If you are in the European Economic Area, the United Kingdom, California, Virginia, Colorado, Connecticut, or any other jurisdiction with comparable privacy law, the above rights apply to you. We do not knowingly process data of users under the age of 13 (or 16 where local law requires); if you believe a child has submitted the signup form, email us and we will delete the record.
7. Security
The server runs fail2ban with a 24-hour ban on repeated failed SSH attempts, a UFW firewall with default-DROP, key-only SSH (password authentication disabled), automatic unattended security upgrades, TLS via Let's Encrypt with HSTS, and rate-limiting on the signup endpoint. Application services are bound to 127.0.0.1 and reverse-proxied via Caddy — they are not directly reachable from the public internet. Signup data is stored at chmod 600 with restricted directory permissions.
Despite reasonable measures, no system is fully secure. If we become aware of a breach affecting your data, we will notify you by email within 72 hours and post a public notice on the X and Telegram channels.
8. International transfers
If you are outside the United States or Romania, your data will be transferred to and stored on infrastructure in those countries. By submitting the signup form, you consent to this transfer.
9. Changes to this policy
We may update this policy. The effective date at the top of this page will change when material updates are made, and we will note material changes on the X and Telegram channels.
10. Contact
Privacy questions or requests: tickwise@tickwise.tech.