Legal

Privacy Policy

The short version: we collect as little as possible, and we can't read what you sync.

This Privacy Policy explains what information TicTease ("we", "us") collects when you use the TicTease app and website (the "Service"), how we use it, and the choices you have. By using the Service you agree to this policy.

Our privacy principles

  1. Data minimization. We collect the least we can to run the Service.
  2. No email required. Accounts use a username and password only — we never ask for your email address.
  3. Encrypted by default. Anything you choose to sync is encrypted on your device before it reaches our servers, so even we can't read it.
  4. No selling your data. We do not sell or rent your personal information to anyone.

Information we collect

Information you provide.

  • Account details (optional). If you create an account to sync across devices, we store a username and a securely hashed password. We do not collect or store your email, phone number, or real name.
  • Messages you send us. If you contact support, we keep your message and any details you include so we can help.

Information collected automatically.

  • Your synced game state. If you sign in, the app stores a slice of your in-app state (such as preferences and progress). This is encrypted on your device with a key derived from your password; our servers only ever store ciphertext. If you forget your password, this data cannot be recovered — by design.
  • Product analytics (privacy-first). Where enabled, we use PostHog to understand which features are used. Analytics run on EU-hosted infrastructure, automatic event capture and session recording are turned off, on-screen text is masked, and we never log the content of dares, prompts or anything you type. We do not build advertising profiles. IP-based geolocation is not persisted.
  • Essential technical data. Like any website, our hosting provider (Cloudflare) processes basic request information to deliver pages and protect against abuse.

Information we do not collect. We do not collect your email address, contacts, photos, microphone or camera data, or precise location.

How we use information

  • To provide and maintain the Service, including optional cross-device sync.
  • To keep accounts secure and prevent fraud and abuse.
  • To understand aggregate usage and improve the product.
  • To respond to your support requests.

Cookies and local storage

We use local storage and a session cookie to keep you signed in and to remember your preferences. Analytics, where enabled, may set a cookie to count unique sessions. We do not use third-party advertising cookies.

Sharing and disclosure

We share information only with service providers who help us run the Service (such as our hosting and analytics providers, acting under contract), or where required by law. We may disclose information if necessary to protect the rights, safety or security of our users or the public.

Data retention

We keep account data for as long as your account exists. Encrypted synced state is kept until you delete it or your account. Support messages are kept only as long as needed to resolve your request.

Your rights and choices

  • Access and deletion. You can delete your synced data from within the app, or ask us to delete your account and associated data.
  • Opt out of analytics. Analytics are aggregate and privacy-preserving; contact us if you'd like to opt out entirely.
  • Regional rights. Depending on where you live (for example, the EEA/UK under the GDPR, or California under the CCPA/CPRA), you may have additional rights to access, correct, port or erase your data. Email us to exercise them.

To make a request, email privacy@tictease.com.

Children

TicTease is for adults aged 18 or older. We do not knowingly collect information from anyone under 18. If you believe a minor has used the Service, contact us and we will remove the data.

International transfers

We operate globally and may process data in countries other than your own. Where we do, we rely on appropriate safeguards for any transfer of personal data.

Security

We use industry-standard measures including encryption in transit (HTTPS), client-side encryption for synced state, and salted password hashing. No method of transmission or storage is perfectly secure, but we work to protect your information.

Changes to this policy

We may update this policy from time to time. We'll revise the "Last updated" date above and, for material changes, provide a more prominent notice.

Contact

Questions about privacy? Email privacy@tictease.com. See also How we handle data for a plain-language summary.