Privacy Policy

Release notifications

If you join a release waitlist, we collect your email address, the release channel you select, when you give consent, the version of the consent wording, and whether your request has been withdrawn or your notification has been sent.

We use this information, with your consent, to send one availability email for your selected release channel. Joining does not create an account or subscribe you to a newsletter or other marketing.

We also process limited technical information to protect the form against spam and abuse, including pseudonymous rate-limit identifiers. We use this information for our legitimate interest in protecting the website and preventing misuse.

You can withdraw your consent at any time by contacting [email protected]. If you withdraw before your notification is sent, we will stop it. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We use cloud hosting and database providers to store waitlist registrations and process signup requests, and email delivery providers to send your requested notification. These providers process the information needed to provide those services on our behalf.

How long we keep waitlist information

We keep your active waitlist registration until your requested notification is sent, the selected release is cancelled, or 12 months have passed since signup—whichever happens first. We delete it within 30 days of that event.

If you withdraw your request, we stop pending notifications and remove your active registration within 30 days.

After your active registration ends, we retain a limited record of your consent and any withdrawal for up to 24 months. This includes an identifier derived from your email address, the selected release channel, the consent wording version, and relevant dates.

We use these records to demonstrate consent and prevent accidental notifications after withdrawal. They are not used for marketing. A withdrawn registration will not be reactivated without a new, verified request.

Deleted registrations may remain in restricted backup copies until those backups expire. Backup copies are used only for recovery. If we restore a backup, we reapply deletion and withdrawal records before sending notifications.

Withdraw a release-notification request

You can withdraw your release-notification request at any time by emailing [email protected]. Each availability email also includes an unsubscribe link. You do not need a TikCodex account to withdraw.

Withdrawal applies to the selected release channel. You can also ask us to cancel all your release-notification requests.

Who is responsible for your information

Exalted Codex LTD, registered in England and Wales under company number 17342078, is the data controller for this website. Our registered address is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

What this policy covers

This policy covers the public website at tikcodex.com. It does not cover the TikCodex desktop application, TikTok, streaming software, app stores, or other connected services, which have their own terms and privacy notices.

The website offers optional release-notification forms. If you use one, you provide your email address and select a release channel. The website does not provide sign-in, checkout, or a general newsletter.

Information we collect

When you visit the website, we and the providers described below may process limited technical and usage information:

• Your IP address, browser, device type, operating system, language, and approximate location.
• Pages viewed and fixed links, buttons, sections, or download choices selected.
• For errors: the affected page, error category, website version, and limited browser-session context captured when an error occurs.
• Analytics identifiers created by Google Analytics when analytics is enabled under your choice or the regional default.

Download activity can show which installer or app-store option you selected. It does not tell us whether an installation succeeded.

Information this website does not collect

The website does not collect TikTok identities, livestream content, payment information, or information held by the TikCodex desktop application. We do not sell website information or use it for cross-site advertising.

Our analytics and diagnostic event filters reject free-form text, email addresses, full URLs and query strings, local file paths, authorization headers, tokens, API keys, secrets, and connection strings before supported website events are sent.

How we use information

• Deliver, secure, and maintain the website.
• Find and diagnose website errors.
• Understand limited website usage and improve navigation, content, downloads, and reliability.
• Meet legal obligations and establish, exercise, or defend legal claims.

Sentry

Sentry helps us detect and diagnose website errors. It receives filtered error and diagnostic information, along with limited masked browser context when an error occurs.

• Sentry Privacy Policy

PostHog

PostHog receives a small, fixed set of website events so we can understand overall site usage. Automatic page views, autocapture, person profiles, advertising data, and persistent browser storage are disabled. It does not create cookies or store anything permanently in your browser. PostHog respects Do Not Track and Global Privacy Control.

• PostHog Privacy Policy

Google Analytics 4

Google Analytics 4 helps us understand aggregate website usage. Where our regional policy requires prior permission, it is not loaded until you allow analytics cookies. In other recognized US states, it may load by default unless you have rejected analytics or enabled a browser privacy signal. Cookie Settings is always available. Advertising storage, advertising user data, advertising personalization, Google Signals, and automatic page-view collection are disabled. You can withdraw consent at any time through Cookie Settings.

• Google Privacy Policy

Website hosting and security

Cloudflare hosts, delivers, and protects the website. It may process your IP address, browser and device information, requested page, and request time to deliver content and protect the website from abuse. It also supplies an approximate country and region for initial language selection and regional cookie settings. This does not request precise device location. We do not persist the returned location in browser storage. If you choose a language, we remember only that preference in local storage until you change it or clear site storage.

• Cloudflare Privacy Policy

Downloads and app stores

Direct downloads are served from releases.tikcodex.com. We may record which download option you select, but not whether installation succeeds. If you continue to the Microsoft Store or Apple App Store, that store processes the visit under its own privacy policy.

• Microsoft Privacy Statement
• Apple Privacy Policy

Our legal bases

Legitimate interests

Hosting, securing, maintaining, and improving the website through Cloudflare, Sentry, and limited PostHog measurement; remembering your chosen language; and analytics where prior consent is not required.

Consent

Google Analytics 4 and its analytics cookies where prior consent is required. You may withdraw consent or reject analytics through Cookie Settings.

Legal obligation

Processing required to comply with applicable law.

When information is shared

We share website information only with the providers described in this policy for the stated purposes, or when required by law. We do not sell it.

How long information is kept

Sentry

Error and diagnostic information is kept for up to 30 days.

PostHog

Website usage events are kept for up to one year.

Google Analytics 4

Detailed user and event data is kept for two months. Aggregate statistics may remain available for longer.

Cookie choice

The website remembers your cookie choice for 180 days.

Cloudflare

Cloudflare may keep limited request and security information under its standard service retention. TikCodex does not export or separately retain raw website request logs.

We may keep information for longer when required by law or reasonably necessary for a dispute or legal claim.

International transfers

Our cloud hosting and database providers process waitlist information outside the United Kingdom. Our other providers may also process information outside the United Kingdom, including in the European Economic Area and United States. Where required, transfers rely on UK adequacy regulations or approved contractual safeguards. Contact [email protected] for information about the safeguards applicable to your information.

Your data-protection rights

Depending on applicable law, you may ask for access, correction, deletion, restriction, or portability of your information, or object to processing. You may withdraw Google Analytics consent through Cookie Settings. Because the website has no account and does not link analytics to your name, we may be unable to identify data as belonging to a particular visitor.

• Complain to the UK Information Commissioner’s Office — You may also contact your local data-protection authority.

Automated decision-making

The website does not make automated decisions that have legal or similarly significant effects on you.

Children

The website is not directed to children under 13. Contact us if you believe we hold information about a child.

How we protect information

We use HTTPS, restrictive browser-security settings, data minimization and filtering, and limit provider-account access to authorized personnel. No internet service can guarantee absolute security, and we review our safeguards as the website changes.

Changes to this policy

We may update this policy when the website, providers, or applicable law changes. We will publish the revised policy and update the date above, and provide a prominent notice for material changes where appropriate.

Contact us

Contact us with privacy questions or requests. We respond within the period required by applicable law.

• [email protected]

Exalted Codex LTD, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.