Privacy

What we collect

When you join the Tickitoff Sync waitlist, we collect the email address you submit and a page_origin label that records which surface of the site you were on when you signed up. MailerLite, our email service provider, also records the IP address of the sign-up request as an audit-trail signal under their Data Processing Agreement.

The sign-up endpoint applies a per-IP rate limit. The Cloudflare CF-Connecting-IP header is held ephemerally in a rate-limit Durable Object while the limit window is active; we do not persist it elsewhere.

Why

The waitlist exists for a single purpose: to notify you when Tickitoff Sync (the paid tier with live updates, cross-device sync, and real-time collaboration) launches. We don't use your email for anything else.

Processors

MailerLite (EU-hosted email service provider) stores your email address and handles the notification send. Cloudflare provides the CDN, the edge Workers runtime that powers the sign-up endpoint, and the Durable Objects that hold the rate-limit state.

Retention

Your email is kept until Tickitoff Sync ships and the launch announcement has been sent, or until you unsubscribe, whichever comes first. The rate-limit IP timestamps in the Durable Object purge after 30 minutes of idleness via a Durable Object alarm.

How to withdraw

Every MailerLite confirmation and notification email includes a one-click unsubscribe link. You can also use the "Leave the waitlist" link in the waitlist confirmation after signing up, or email hello@tickitoff.app with a deletion request.

Your rights

Under the EU General Data Protection Regulation (Articles 15–17), you have the right to access, rectify, and erase your personal data. Email hello@tickitoff.app to exercise any of these rights.

What's in the share URL

Tickitoff's free tier puts the entire checklist content inside the share URL itself, after the ?l= parameter. This makes checklists portable and lets us run the free tier on static infrastructure with no per-user backend state, but it also means anyone who sees the URL sees the checklist. URLs can appear in browser history, CDN access logs, chat preview cards, server-side referer headers, and screenshots.

If you need private sharing, Tickitoff Sync (the paid tier) keeps checklist content on the server and shares only an opaque identifier.

Sign up for the privacy-preserving alternative