Privacy Policy
Summary
This website sets no cookies and stores nothing on your device that could identify you. Fonts, styles and images are served from this domain.
Two measurements run on top of that, and they work differently from one another. Plausible counts page views so that we can see which pages are read at all. It uses no cookies, stores nothing on your device and processes exclusively in the EU, which is why it runs without asking you first; it is described in full below, and you can object to it. The Google Ads tag measures whether our advertising works. It does store identifiers on your device and transmits data to Google, and it is therefore loaded only if you say yes to the bar at the bottom of the page.
Controller
Benjamin Neske
c/o Rechtsanwalt Matutis
Berliner Straße 57
14467 Potsdam
Germany
Email: hallo@ticksights.com
Server log files
When you access this website, our hosting provider automatically records information that your browser transmits. This comprises:
- the IP address of the requesting device
- date and time of the request
- the page or file requested
- the referring URL, if transmitted by your browser
- browser type, version and operating system
This data is not merged with other data sources and is not used to identify individual visitors. The legal basis is Art. 6 (1) (f) GDPR: we have a legitimate interest in operating the website reliably and in investigating technical faults and misuse.
Log files are kept as long as they are needed to keep the site running reliably and to investigate technical faults or misuse, and are deleted once that purpose no longer applies. They are retained beyond that point only where they are required to clarify a specific security incident that is still being investigated. The retention period is set by our hosting provider as part of the hosting service.
Hosting
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The hosting provider processes the log data described above on our behalf as a processor pursuant to Art. 28 GDPR. The servers are located in Germany.
Contacting us by email
If you write to us, we process your email address, your name if you give it, and the content of your message in order to answer you. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or its initiation, and otherwise Art. 6 (1) (f) GDPR: we have a legitimate interest in responding to enquiries addressed to us.
Our mailbox is operated by Hetzner Online GmbH on the same hosting package as this website, again as a processor under Art. 28 GDPR. We keep correspondence for as long as it is needed to deal with your enquiry and any follow-up questions, and delete it afterwards unless statutory retention periods under commercial or tax law require us to keep it longer.
Providing your data is neither required by law nor by contract. You do not have to write to us, but without your message we cannot answer it.
Subscriptions and payment
Subscriptions are not purchased on this website. The plan buttons lead to Whop, which acts as the merchant of record and is your contracting party for the purchase. Whop collects the data needed for the order, payment and invoicing under its own responsibility as a controller. Please refer to its privacy policy for that processing; we receive only the information we need in order to give you access to the platform.
Reach measurement with Plausible
To find out which pages are read at all, and whether an article or an ad
brings anyone here, we use Plausible Analytics, provided by Plausible
Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia, as our processor under
Art. 28 GDPR. The measurement runs under the site key ticksights.com.
Plausible sets no cookies, writes nothing to your browser's storage and reads nothing out of it. There is no identifier that would let us recognise you on your next visit, on another device or on anyone else's website. When you open a page, the following is transmitted to Plausible:
- the address of the page you opened, including any campaign parameters in the URL
- the referring URL, if your browser transmits one
- browser, operating system and rough device class
- country and, in coarse form, region and city, derived from your IP address
- the target address when you click a link that leads off this website, for example to our checkout
Your IP address is not stored. It is used once, together with the browser identification and a secret value that changes every day, to compute a checksum. That checksum is what makes two page views on the same day countable as one visit; it cannot be turned back into your IP address, and once the daily value has been replaced the following day, the same visitor can no longer be recognised. What remains for us are aggregate figures: counts per page, per source, per country. We cannot single out an individual visitor in them, and neither can anyone else.
Processing takes place on servers in the EU; Plausible processes exclusively within the EU and transmits nothing to a third country. The figures are kept for as long as we run this website.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is in knowing which of our pages are read and where our visitors come from; a website whose reach is entirely unknown cannot be improved. § 25 (1) TDDG does not apply here, because nothing is stored on your device for this purpose and nothing is read from it – which is precisely why we chose a service that works this way, and why we do not ask you for consent to it.
You have the right to object to this processing at any time under Art. 21
(1) GDPR, by writing to hallo@ticksights.com. Independently of that,
any content blocker that blocks plausible.io stops the measurement
completely. We do not route it through our own domain to get around that,
although it is technically possible.
Advertising measurement with Google Ads
We advertise on Google. To measure whether those ads reach anyone, we use the
Google Ads tag (gtag.js, conversion ID AW-16814730831) provided by
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The tag is not loaded when you open a page. A bar at the bottom of the page asks first, with declining exactly as easy as accepting. Until you accept, no request is made to Google at all, not a cookie-free one either, and nothing is stored on your device for this purpose.
If you do accept, the tag is loaded and sets cookies on this domain
(_gcl_au, and _gcl_aw or _gcl_dc if
you arrived through one of our ads), retained for 90 days. Google sets
further cookies on its own domains. Your IP address, information about the
pages you view here and, where present, the identifier of the ad you clicked
are transmitted to Google, including to servers in the USA. Google is
certified under the EU–US Data Privacy Framework, so that transfer is covered
by an adequacy decision under Art. 45 GDPR. Google processes the data on its
own account as a controller; its own privacy policy applies to that.
The legal basis is your consent, § 25 (1) TDDG and Art. 6 (1) (a) GDPR. Consent is voluntary and nothing on this website works differently if you decline. You can withdraw it at any time with effect for the future, using the Advertising settings entry at the bottom of every page. Withdrawal does not affect the lawfulness of what was processed before it. Full detail, including every cookie by name, is in our Cookie Policy.
Local storage
We store two entries in your browser's local storage: under ts-lang the language you picked, as a two-letter code, and under
ts-consent your answer to the consent bar, as the
single word granted or denied. The first stops the
language bar from asking again on every page, the second does the same for
the consent bar.
Neither entry leaves your device, neither is transmitted to us, neither contains an identifier and neither allows us to recognise you. They are therefore not personal data. Both are strictly necessary within the meaning of § 25 (2) no. 2 TDDG: one for a feature you have used, the other in order to honour a decision you have made. You can delete them at any time through your browser's site data settings.
If you have consented to advertising measurement and have just completed a
purchase, the confirmation page additionally writes a marker to session
storage (key beginning ts-conv:) so that the same purchase is
not counted twice on a reload. It holds nothing but the digit 1 and is gone
when you close the tab. Without your consent it is never written.
The reach measurement described above adds nothing to this list. It stores no third entry, no cookie and no identifier of any kind on your device.
Fonts and other resources
The typeface used on this site is hosted on our own server. No request is made to any external font service, content delivery network or image host when you view a page. The only two exceptions are the ones described above, and they are named there by their provider: the reach measurement, which runs within the EU, and the advertising tag, which runs only if you consent to it.
External links
This website links to services operated by others, in particular our web application, our documentation, our checkout provider and our Discord server. Following such a link transmits data to the respective provider. This privacy policy does not apply to those services; please refer to the privacy policy of the provider concerned.
Transfers outside the EU
Hosting and email take place on servers in Germany, and the reach measurement described above stays within the EU. The only transfer to a third country is the one to Google, and it happens only if you consent to it; the basis is the adequacy decision for the EU–US Data Privacy Framework under Art. 45 GDPR. If you decline, no personal data is transferred to a third country or to an international organisation at all.
Where you follow a link to one of the external services named above, that provider may process your data outside the EU under its own responsibility; this policy does not extend to it.
No automated decision-making
We do not use automated decision-making within the meaning of Art. 22 GDPR. Nothing on this website is decided about you by an automated process, and nothing you see here changes based on what has been measured about you. Where you have consented to advertising measurement, Google may use the data for its own ad targeting; that is a matter for Google's privacy policy, and it produces no legal effect on you and nothing comparable to one.
Your rights
You have the right to obtain information about the personal data we hold about you (Art. 15 GDPR), to have it rectified (Art. 16), erased (Art. 17) or its processing restricted (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). To exercise any of these rights, write to hallo@ticksights.com.
Where processing rests on your consent, you also have the right to withdraw it at any time under Art. 7 (3) GDPR, without affecting the lawfulness of processing carried out before the withdrawal. For advertising measurement you do not need to write to us: the Advertising settings entry at the bottom of every page does it in one click.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany
https://www.lda.brandenburg.de/
Changes to this policy
We will update this policy when the technical setup of the website changes, for example if embedded third-party content were to be introduced. The advertising measurement and the reach measurement described above were both added in this way. The date above indicates the current version.