Privacy Policy

This policy explains what personal data Tixdata collects when you use tixdata.net and our API, why we collect it, who it is shared with, and what rights you have. Tixdata is the data controller for that information.

Account data. You sign in with Discord or Google. From that we receive and store your name, email address, and the provider’s account identifier for you. We never receive your Discord or Google password.

Billing data. If you subscribe, Stripe creates a customer record and we store its identifier, your subscription status and the date your paid period ends. Card numbers are handled entirely by Stripe and never reach our servers.

Community membership. Where access comes through a partner community, we store whether that membership is currently valid, which community it came from, and when we last checked.

Usage data. To understand product use and to enforce fair-use limits, we record per day: how many page views you made, roughly how long you were actively using the site, and when you were last seen.

Request quotas. We keep hourly, daily and weekly request counters. For signed-in traffic these are keyed to your user ID; for signed-out traffic they are keyed to your IP address; for API traffic, to a hashed form of the API key.

Alerts you configure. If you set up sale alerts, we store the alert criteria, the destination you chose (such as a webhook URL), and a record of deliveries.

Preferences and support. Your light/dark theme choice, and anything you send us through the feedback widget or by email.

• To provide the service — signing you in, showing the right data for your access level, taking payment. Basis: performance of our contract with you.
• To keep the service working and fair — rate limiting, quota enforcement, preventing scraping, abuse and unauthorised access. Basis: our legitimate interests in protecting the service and our other users.
• To understand and improve the product — aggregate usage patterns and performance. Basis: our legitimate interests.
• To communicate with you — service messages, billing notices, replies to your questions. Basis: contract and legitimate interests.
• To meet legal obligations — tax and accounting records for payments. Basis: legal obligation.

We use a small number of strictly necessary items and no advertising cookies:

• a session cookie that keeps you signed in;
• your theme preference, kept in your browser’s local storage so the page does not flash the wrong colours;
• cookies set by Cloudflare, which delivers and protects the site.

The site also uses Cloudflare’s real-user monitoring to measure page performance. Clearing your browser storage will sign you out and reset your theme.

We share personal data only with the providers needed to run Tixdata, each acting under contract:

• Stripe — payments and subscription management.
• Discord and Google — sign-in, when you choose them.
• Whop — verifying partner community membership, where that is how you have access.
• Cloudflare — content delivery, protection and performance monitoring.
• DigitalOcean — hosting of the application and database.

We may also disclose data where the law requires it, or to establish or defend legal claims. If Tixdata is ever sold or reorganised, data may transfer with the business, subject to this policy.

• Account data: for as long as your account exists, and then deleted on request.
• Billing records: retained as long as tax and accounting law requires, typically six years.
• Usage and quota data: short-lived and kept only as long as it is useful for limits and product analysis.
• Support messages: kept while needed to deal with the matter and a reasonable period after.

Under UK and EU data protection law you can ask us to:

• give you a copy of the personal data we hold about you;
• correct it if it is wrong;
• delete it, where we have no overriding reason to keep it;
• restrict or object to how we use it, including use based on legitimate interests;
• provide it in a portable format, or withdraw consent where we relied on consent.

To exercise any of these, email [email protected]. We will respond within one month. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk, or to your local supervisory authority.

Access to the service is authenticated, traffic is encrypted in transit, and administrative access to the database is restricted. API keys are held in hashed form for quota accounting. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the data we hold.

Some of our providers process data outside the UK and EEA. Where that happens, the transfer is covered by an adequacy decision or by standard contractual clauses with appropriate safeguards.

Tixdata is not intended for anyone under 18, and we do not knowingly collect data from children.

We will update this policy as the service changes. The date at the top shows the current version, and we will give notice of material changes.

Privacy questions or requests: [email protected].