Privacy policy
We collect what it takes to run your game servers and bill for them, and nothing for advertising. No analytics, no tracking cookies, and we never sell your data.
Who we are
TickToad (ticktoad.com) is run by Scale Initiative LTD, trading as TickToad, a company registered in England and Wales (number 17005340) at 86-90 Paul Street, London, England, EC2A 4NE. We are the controller of the personal data described here. For anything about your data, email support@ticktoad.com.
What we collect
- Your account
- Your email address, your password (stored only as a salted hash), whether your email is verified, your two-factor authentication settings, and your timezone if you choose one.
- Sign-ins
- For each signed-in session, the IP address and browser it came from, so you can see and end your sessions on the account page.
- Your approximate location
- When you visit, our host Cloudflare tells us roughly where the request came from (continent and timezone). We use it to suggest the nearest server region and show times in your timezone, and don't store it.
- Your servers
- Server names and settings; the worlds you upload and the saves your servers make; the last 500 lines of each server's console, which can include players' in-game names and chat; player counts and resource use; and an activity log of who started, stopped or changed each server.
- People you invite
- The email addresses you send server invites to.
- Payments
- Stripe handles card payments; we never see your full card number. We keep the amount, date and Stripe reference of each payment, refund and dispute, and your credit balance.
- Emails with us
- What you send to support, and our replies.
- Logs
- Our servers log requests (IP address, page, time) and errors, to keep TickToad running and secure.
Why we use it
- To provide TickToad (performing our contract with you): your account, running your servers, billing, and the emails the service sends, such as verification, password resets and invites.
- To keep it secure and fair (our legitimate interests): preventing fraud, abuse and attacks, and fixing problems.
- To meet legal obligations: keeping accounting records and responding to lawful requests.
We don't use your data for advertising or profiling, and we only email you about your account and servers.
Who we share it with
We use these providers to run TickToad. Each processes data only on our instructions:
- Cloudflare hosts the website, database and file storage, sends our emails, and runs DNS, worldwide including the United States.
- Hetzner Online runs the game servers, in Germany and Finland for Europe and in the United States for US regions. A server receives its world and settings while it runs, and is deleted when it stops.
- Stripe processes payments and keeps your saved card if you choose to save one.
People you share a server with can see your email address in its members list and activity. Anyone with a server's address can see that it's running and connect to the game, under the game's own rules. We may also disclose data if the law requires it, or to protect TickToad or its users from fraud or harm.
Transfers outside the UK
Some of our providers process data in the United States and the European Economic Area. Where data leaves the UK, it's protected by an adequacy decision (such as the UK–US data bridge) or by standard contractual clauses with the provider.
How long we keep it
- Your account and servers, until you delete them. Each server keeps its 10 most recent saves plus any you lock.
- When you delete your account, we delete its servers, saves, console history, invites, activity and saved card straight away, then your login.
- Payment records are kept for six years for accounting, as UK law requires, linked to an account number that no longer identifies you.
- Request and error logs, and database backups, for up to 30 days.
- Support emails, for as long as needed to help you, and no more than two years.
Cookies
We only use cookies that TickToad needs to work: one to keep you signed in, one that remembers whether you collapsed the sidebar, and security cookies Cloudflare may set to block bots. There are no analytics or advertising cookies, so there's nothing to opt out of.
Your rights
You can ask for a copy of your data, have it corrected or deleted, ask us to restrict or stop using it, or ask for it in a portable format. You can see your sessions, download your worlds and delete your account yourself in the portal; for anything else, email support@ticktoad.com and we'll reply within a month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk) or the data protection authority where you live, though we'd like the chance to fix it first.
Children
TickToad isn't meant for children under 13, and we don't knowingly collect their data. If you think a child under 13 has an account, email us and we'll delete it.
Security
Everything is encrypted in transit. Passwords are hashed and two-factor authentication is available on every account. Game servers only accept connections on their game's port.
Changes
If we change this policy in a way that matters, we'll email you before it takes effect. The date at the top shows when it last changed.