Privacy policy

1. Who controls your data

The data controller is Jiri Dusek, Konevova 572/18, Dubi 1, 41701 Czech Republic. You can contact the controller through the support form.

2. Data we process

When you submit a support request, we process your email address, message, request type, and any optional name, watch face, watch model, or firmware version you provide, and keep the conversation so you can follow it in your account or through the link in our emails. If you attach images to a message, we store them with the conversation; your browser removes location and camera data before the upload, we remove any that remain, and only you and TIKKS support can see them. Our emails about a reply mention attached images but do not include them. Our hosting and security provider may also process technical request data such as an IP address, browser information, timestamps, and security signals.

When you create an account, we process your email address, how you sign in (a one-time email code, or Google, from which we receive your email address, name, and Google account ID), an optional display name and whether to show it, the watches you add, your wishlist and owned watch faces, your notification and newsletter choices, notifications we show you, and the sessions that keep you signed in. New accounts get emails about new watch faces (at most once a week) and about watch faces on their wishlist that are out or on sale; you can turn each off on the account page or through the link in every alert. The newsletter is sent only if you turn it on.

When you ask to be notified about a watch face without an account, we store your email address, the watch faces you asked about, when you confirmed the address, and your newsletter consent if you gave it. We send alerts only after you confirm the address through the email we send you.

When you share a photo, we store the image, the watch face, the watch model and caption you choose, and the upload time. Your browser removes location and camera data from the photo before it is uploaded, and we remove any that remain. After our review, the photo is shown publicly with your display name, or as "TIKKS fan" if you hide your name.

When you buy a watch face on this website, Paddle processes the payment and your billing details as the merchant of record; we do not receive your card details. We store the order (Paddle transaction ID, watch face, price, and the account it belongs to) and its unlock code. When a watch checks the code, we store a one-way hash of the watch's app-specific identifier, so the code can be limited to two watches.

When a TIKKS trial watch face checks whether it is licensed, it sends our licence service the watch's app-specific device identifier, the watch face name, and the watch's model (part) number. We store only a keyed one-way hash of the identifier, never the identifier itself. With the hash we store the watch face, the model number, when the watch first and last checked in, its pairing PIN while the PIN is valid (7 days), and, after you pair the watch by entering the PIN in your account, the account and the licence it belongs to. For each licence we also keep the list of watches it was used on, with when each was first and last used. To prevent guessing, we count wrong PIN entries per account for 24 hours.

If you consent to analytics, we measure page views and interactions such as watch face impressions, expanded items, outbound store and trial clicks, newsletter conversions, support form completion, account actions such as sign-in, list changes, and photo uploads, referrer and campaign parameters. Analytics may also process device and browser information and approximate location. With your consent, Meta Pixel may process page views, interactions, IP address, browser and device information, and cookie identifiers for advertising measurement and personalization. We do not send support messages, email addresses, photos, or form field contents to analytics or Meta Pixel. Separately, the website itself counts anonymous daily totals of the same interactions (event name, watch face and page placement only, without cookies, IP addresses or account links) so we can see which watch faces people look at; these totals are kept for up to 400 days.

When you open a TIKKS QR link (tikks.io/qr/…), we count the scan together with the watch face it belongs to and redirect you to the Connect IQ Store. This count does not use cookies, your IP address, or device identifiers, and it is not shared with Google Analytics, Metricool, or Meta.

When you save a configuration in a watch face configurator (tikks.io/configure/…), which requires signing in to an account, we store the chosen watch face settings, including any texts you type such as custom texts and time zone labels, under a random six-character code so your watch can download them. We do not store your name, email address, IP address, or device identifiers with the configuration. When your watch downloads it, the request carries only the code, the version of the watch face settings, and the display type.

3. Why we process it

We use this information to answer support questions, investigate technical problems, understand feature requests, protect the form from abuse, and maintain the security of the website.

To run your account, send the release, sale, and wishlist notifications you ask for, show the update notes of watch faces you marked as owned, and show the photos you choose to share, deliver and check the unlock codes you buy, and check whether a watch you paired holds a licence, processing is necessary to provide the service you requested. Newsletter emails are sent only with your consent, which you can withdraw through the link in every email or on the account page.

Where your request relates to a purchase or service, processing is necessary to take steps at your request or perform that service. For general support, feature feedback, and website security, processing is based on our legitimate interests in supporting users and improving and protecting our products.

With your consent, analytics helps us understand which pages and watch faces are useful, evaluate campaigns, and improve the website. Meta Pixel helps measure advertising performance and may support personalized advertising. Consent is the legal basis for this optional measurement and advertising processing. You may refuse or withdraw consent without affecting the operation of the website.

4. Service providers

Cloudflare provides website hosting, storage of accounts, licences and trial watch records, support requests and their images, photos, and saved watch face configurations, delivery of support, account, and notification emails, security, privacy-first web analytics, Zaraz tag management, and consent management. Google provides sign-in if you choose Continue with Google. MailerLite sends the newsletter to people who subscribed. Paddle sells watch faces on this website as the merchant of record and handles payment, tax, invoices, and refunds under its own terms. Google Analytics processes consented website measurement, Metricool processes consented page-view analytics, Meta provides Meta Pixel for consented advertising measurement and personalization, and Google Fonts supplies the Manrope web font used by this website. These providers process limited data under their own contractual and privacy terms.

Some providers may process data outside the European Economic Area. Where required, such transfers rely on legally recognized safeguards made available by the provider.

5. Retention

Saved watch face configurations are deleted automatically 24 hours after they are saved.

Account data is kept until you delete your account on the account page, which also deletes your watches, lists, notification settings, photos, and the images attached to your support requests. Notifications shown under the bell next to your name are kept until you clear them or delete your account.

Unconfirmed notification requests are deleted after 7 days. Confirmed ones are kept until you unsubscribe through the link in any alert email. Photos are kept until you delete them, delete your account, or we remove them.

Orders and unlock codes are kept for as long as the purchased watch face can be used, so a code keeps working after you delete your account; deleting the account removes only the link to it.

Records of trial watches that are not paired to an account are deleted 90 days after the watch last checked in. Licences and the list of watches used with them are kept as long as the licence can be used. Deleting your account removes the link between the account and its watches and licences: your watches become unpaired and are then deleted 90 days after they last checked in, and a licence we granted you without a purchase is deleted with the account.

Support correspondence, including attached images, is deleted no later than six months after the last message in the conversation. Information may be retained longer only where necessary to establish, exercise, or defend legal claims or to meet a legal obligation.

6. Cookies and analytics

Cloudflare may process strictly necessary technical and security data to operate and protect the website and support form. Google Analytics and Metricool are enabled only after you consent to the Analytics purpose in the consent dialog. Meta Pixel may use advertising cookies and similar identifiers, and is enabled only after you give consent in the consent dialog.

If you sign in, strictly necessary first-party cookies keep you signed in for up to 90 days and protect Google sign-in from forgery. They are not used for analytics or advertising.

Your consent preference is stored in a first-party cookie so the website can remember your choice. You can review or withdraw consent at any time through the Privacy settings link in the footer.

7. Your analytics choices

Analytics and advertising consent are optional. If you decline, the website remains fully functional. Cloudflare's privacy-first aggregate web analytics may still measure basic traffic without collecting or using personal data, while Google Analytics events, Metricool page views, and Meta Pixel activity are withheld until the relevant consent is granted.

8. Your rights

Subject to applicable law, you may request access to, correction of, deletion of, or restriction of your personal data, object to processing based on legitimate interests, withdraw consent, and request data portability where applicable. You may exercise these rights through the support form. You can also download or delete your account data yourself on the account page.

You also have the right to lodge a complaint with the Czech Office for Personal Data Protection.

9. Changes to this policy

We may update this policy when the website, service providers, or legal requirements change. The effective date at the top identifies the current version.