Privacy Policy

Last updated: May 2026  ·  Trading as Artfuly  ·  Operated by Rachael Page

Who We Are

Ticklists is a web app for managing shopping lists and routines. It is operated by Rachael Page, trading as Artfuly, Körnerstraße 16, 15370 Petershagen-Eggersdorf, Brandenburg, Germany. Contact: [email protected]

What Data We Collect

When you create an account and use Ticklists, we collect:

• Account data: your email address and password (stored securely via Firebase Authentication)
• App data: the lists, items, sections, and tags you create — stored in your account so you can access them across devices
• Payment data: if you subscribe to Pro, payment is handled by Stripe. We do not store your card details — Stripe processes and stores these on our behalf
• Usage data: basic technical data (browser type, device, pages visited) collected automatically to keep the service running

Why We Collect It

• To provide and operate the Ticklists service (legal basis: contract performance — GDPR Art. 6(1)(b))
• To process subscription payments (legal basis: contract performance)
• To keep the service secure and improve it (legal basis: legitimate interests — GDPR Art. 6(1)(f))

Third-Party Services

We use the following third-party processors. Each has its own privacy policy.

• Firebase (Google LLC) — authentication, database, and hosting. firebase.google.com/support/privacy
• Stripe Inc. — payment processing. stripe.com/privacy
• Bunny.net — video content delivery. bunny.net/privacy

Cookies

We use cookies to keep you logged in and to understand how the site is used. You can manage your cookie preferences via the cookie banner when you first visit the site. Strictly necessary cookies cannot be disabled as they are required for the service to function.

Data Retention

We keep your account data for as long as your account is active. If you delete your account, your data is removed from our systems within 30 days. Payment records are retained as required by law (typically 10 years for tax purposes).

Your Rights (GDPR)

Under GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Request a copy of your data in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email [email protected]. We will respond within 30 days.

Right to Complain

If you believe we are handling your data unlawfully, you have the right to lodge a complaint with a supervisory authority. In Germany, the relevant authority is the data protection commissioner for your federal state. Brandenburg's authority: lda.brandenburg.de

Changes to This Policy

We may update this policy occasionally. The "last updated" date at the top of this page will always reflect the current version.