Privacy Policy
Last updated: September 1, 2026
This translation is provided for convenience only. In the event of any discrepancy, the French version prevails.
This policy describes how GONOTECH ("TickServ", "we") processes your personal data in connection with the https://tickserv.com service, in accordance with the General Data Protection Regulation (GDPR) and the French "Informatique et Libertés" law.
1. Data Controller
The data controller is GONOTECH, EURL, 54 rue Paul Lafargue, 69100 Villeurbanne, France (see Legal Notice).
Contact for any question about your data: support@tickserv.com. (We are not required to appoint a data protection officer; this contact handles your requests.)
2. Data We Process
We apply the data minimization principle: we only collect what is necessary.
| Category | Data | Source |
|---|---|---|
| Account / identification | Email address, account identifier (Clerk), connection provider identifier (Google or Discord), referral code | You / your connection provider |
| Billing | History of Wallet top-ups and debits, payment identifiers (Stripe) — we never store your card number | You / Stripe |
| Service | Servers created (game, name, machine IP address), Discord webhook URL (if you enable it), timestamped proof of consent to immediate performance | You / the service |
| Operations log | Actions performed on your account and servers (start, stop, settings change, backup, restore, payment), with their date, outcome and context; visit date (one per day and per device, with country and device type, no IP address); number of distinct players in a game session — not their usernames — necessary to provide the service, bill it, and support you | Automatic |
| Technical | Connection logs, IP address, anti-bot security data (Turnstile) | Automatic |
| Visit source | Arrival channel (direct access, search, AI assistant, social network, referring site, campaign), utm_* parameters present in the link, domain name of the referring site, entry page path, any advertising click identifier, date of first contact |
Automatic (ts_ft cookie, see §8) |
| Audience measurement | Page viewed, event triggered (e.g., creating a server, topping up), country, device type, browser, language, site or search engine you came from — without any account identifier and without a cookie | Automatic (Umami, see §4) |
| How you heard about us | Your answer to the question asked in the console (Discord, Reddit, a search, a friend, a video — and free text if you write one) — answering is optional, you may decline | You |
| Ideas and votes | Requests you post on the "Ideas & Requests" board (category, title, detail) and your votes — visible to other logged-in members, without your name or email address | You |
No sensitive data is collected. The service is not intended for minors.
3. Purposes and Legal Bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and manage your account, provide the service (servers, wallet) | Performance of the contract (art. 6.1.b) |
| Process payments and issue invoices | Performance of the contract + legal obligation (accounting/tax) |
| Security, prevention of fraud and abuse (Turnstile, logs) | Legitimate interest (art. 6.1.f) |
| Referral program | Performance of the contract / legitimate interest |
| Discord notifications for your server | Your consent (optional activation) |
| Respond to your requests (support) | Legitimate interest |
| Collect and prioritize your ideas for games and features | Legitimate interest (service improvement) |
| Know how you heard about us (internal audience measurement) | Legitimate interest (art. 6.1.f) — right to object, see §7 |
| Measure site audience and identify where the journey stalls | Legitimate interest (art. 6.1.f) — right to object, see §7 |
| Collect your answer to "how did you hear about us?" | Your consent (optional, can be declined) |
Providing account and payment data is necessary to use the service; without it, we cannot provide it.
4. Recipients and Sub-Processors
Your data is accessible only to our authorized staff and to the sub-processors strictly necessary for the service to operate:
- Clerk — authentication and account management;
- Stripe — secure payment processing;
- Cloudflare — hosting of the site and database, anti-bot protection (Turnstile);
- Umami Cloud — site audience measurement;
- Hetzner (Germany) — running game servers;
- OVHcloud (France, United Kingdom, Germany, Canada) — running game servers;
- Google / Discord — only if you choose this sign-in method, and Discord if you enable notifications.
Each acts on our instructions under a GDPR-compliant data processing agreement. We do not sell your data.
5. Transfers Outside the European Union
Some sub-processors (Clerk, Stripe, Cloudflare, Google, Discord) are established in, or may process data in, the United States. These transfers are governed by the appropriate safeguards provided for by the GDPR: the European Commission's standard contractual clauses and/or certification under the EU–US Data Privacy Framework, depending on the provider. Our main database, meanwhile, is located in the European Union.
Our audience measurement provider (Umami Cloud) operates servers in the European Union and in the United States; this processing is governed by a GDPR-compliant data processing agreement.
Game servers are located in the country you choose when creating them: Germany, France, the United Kingdom, or Canada (Quebec). The United Kingdom and Canada are subject to an adequacy decision by the European Commission — for Canada, limited to commercial organizations subject to the Canadian federal law on the protection of personal information (PIPEDA) — which authorizes this transfer without additional safeguards. If unavailable, the server is started in another data center on the same continent: a server requested in Canada is never moved to Europe, nor the reverse.
6. Retention Periods
- Account and associated data (email, servers, preferences): for the entire lifetime of the account, then deleted within 30 days of its closure.
- Billing data and accounting records: 10 years, in accordance with legal obligations (art. L. 123-22 of the French Commercial Code and tax obligations).
- Technical and security logs: 12 months maximum.
- Operations log (actions, visits, game sessions): 12 months, then automatically deleted — and immediately, regardless of this period, upon closure of your account.
- Ideas and votes: deleted with the account — your requests disappear from the board and your votes no longer count. You may also withdraw a request at any time from the board.
- Visit source: kept for the entire lifetime of the account, then deleted with it. The cookie that carries it expires after 6 months.
- Your answer to "how did you hear about us?": kept for the entire lifetime of the account, then deleted with it. We only ask the question once, and declining to answer is final.
- Proof of consent (right of withdrawal): kept for as long as necessary to establish proof in the event of a dispute.
7. Your Rights
Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection (for processing based on legitimate interest), portability, and the right to withdraw your consent at any time (for processing that relies on it).
You may exercise these rights by writing to support@tickserv.com. We may ask you for proof of identity in case of reasonable doubt. We respond within one month.
You may also delete your own account and servers yourself from your console.
If you believe your rights are not being respected, you may lodge a complaint with the CNIL (French data protection authority): 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
8. Cookies
The site uses only first-party cookies: set by our own pages, read only by us, never by a third party.
- Strictly necessary cookies, exempt from consent: a session cookie to keep you signed in (authentication), security cookies (anti-bot protection), and a language preference cookie (
ts_locale, kept for 12 months, containing only a language code:fr,enorde). - An internal audience measurement cookie (
ts_ft, kept for 6 months): on your first visit only, it records how you arrived at the site — arrival channel,utm_*parameters present in the link, domain name of the site that sent you, entry page path, and any advertising click identifier. It contains neither your name nor your email address nor the full URL of the pages you view, and it is never rewritten afterward.
We use no advertising cookies and do not track you from site to site. The ts_ft cookie is used solely to know which channels bring us visitors; its data is neither shared nor resold.
Our audience measurement tool (Umami, see §4) sets no cookie at all: your browser sends the page viewed and the event triggered to our own site, which forwards them to the provider together with your IP address and browser — the only two pieces of information it needs to infer the country and device type, which we do not keep on our end. No account identifier appears in it, and nothing is written to your device to recognize you from one visit to the next. It retains only two technical markers, with no personal data whatsoever: one that remembers your refusal to be measured (see below), and one that avoids counting the same signup twice.
Both of these measures fall under internal audience measurement (legitimate interest, art. 6.1.f) rather than advertising tracking. You can object to them at any time: by refusing cookies in your browser for ts_ft, by opening https://tickserv.com/?sans-mesure for audience measurement (the setting applies to that browser), or by writing to us (see §7).
9. Security
We implement appropriate technical and organizational measures: encryption of exchanges (HTTPS), hosting on secure infrastructure, restricted access to data, and reliance on payment and authentication providers that comply with industry standards.
10. Automated Decision-Making
We do not carry out any fully automated decision-making producing legal effects concerning you, nor any profiling. The automatic shutdown of a server (insufficient balance, inactivity) is simply a technical means of performing the contract.
11. Changes
We may update this policy. In the event of a material change, we will inform you. The date of the last update appears at the top of this document.