Privacy Policy

Who we are

Tickit is operated by Cormens OÜ (registry code 17497453), a company registered in Estonia. Cormens OÜ is the data controller for everything described below.

If you have an account

Hosting a game requires an account. We store your name, your email address and your password, which is hashed and never kept in readable form. We also store the games you create and everything inside them.

If you play as a guest

Playing does not require an account. We store the display name you pick for that game and a random token in a cookie in your browser, which is how we recognise you when you come back to the same game. We do not ask a guest for an email address or any other personal detail. Your display name is the only thing other players see, and it applies to that one game.

Photos

A photo you attach to a square is stored on Cloudflare R2 and is visible to everyone playing that game. The host of the game can download all of them at once. Ask us to delete a photo, or delete your account to remove everything tied to it.

AI suggestions

When a host asks for square suggestions, the text describing their event is sent to Anthropic and processed by a Claude model. No player data, marks or photos are sent. It is not used to train models. We keep a log of the request and the suggestions so we can review quality.

Payments

Payments are processed by Paddle, our merchant of record. We never see or store your full card details. Your bank statement will show the charge under Paddle.com or PADDLE.NET. We store the Paddle customer and transaction identifiers so we know what was bought.

Who else touches your data

Besides Paddle and Anthropic above, Tickit runs on Laravel Cloud (hosting and database) and uses Cloudflare (photo storage and DNS). We do not use advertising networks and we do not run third-party analytics or tracking on Tickit.

Cookies

Tickit uses two cookies and both are necessary for it to work: a session cookie, and the long-lived guest token that keeps you attached to your board. There are no advertising or analytics cookies, so there is nothing to opt out of.

How long we keep things

Game data is kept for as long as the game exists. Payment records are kept for as long as Estonian tax law requires. Deleting your account from your profile removes your account and the data tied to it.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to hello@tickit.ee. If you are in the EU you can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Contact

Questions about this policy or your data: hello@tickit.ee.