Privacy policy
Last updated 19 October 2026.
The short version: we ask only for a username and an email address, never your real name, we don't use tracking cookies, ads or third-party trackers, and you can delete your account yourself at any time.
Who is responsible
Ollywood Games runs Tickertaka and is the controller of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018). You can reach us through the feedback form.
What we store
- Your account: your username, your email address and your password. The password is stored only as a one-way scrypt hash, so we can't read it. Your email address is never shown to other players.
- Email links: when we email you a link (to confirm your address or reset your password) we keep a scrambled copy of the link's code, the address it went to and when it expires, so it can be used once. These are deleted once used or expired.
- Your game: your trades, holdings, credits, dividends, watchlist and the mini leagues you're in.
- A session cookie: one cookie that keeps you logged in. It is strictly necessary for the site to work, so it needs no consent banner. We set no other cookies.
- IP addresses, briefly: to stop signup spam and password guessing we count attempts per IP address. These records are deleted after two days at most; most never leave the server's memory.
- Page views: the page visited (without anything after the "?"), the day, your account number if you're logged in, and a visitor code. The visitor code is a scrambled mix of your IP address, browser type and a random value that changes every day and is then thrown away, so we can count visitors on a day but can't follow anyone across days or work out the IP address from it.
- Game events: that an account signed up, traded (and which way), created or joined a league, deleted itself or sent feedback, with the time.
- Feedback: what you write in the feedback form and, only if you give one, how to reply to you.
We don't ask for your name, age, location or payment details, and we never will for the free game.
Why we use it
- To run the game you signed up for (your account, trades, leagues and the leaderboards). The lawful basis is that it is necessary to provide the service you asked for.
- To email you about your account (confirming your address, password resets, and security notices such as a changed password or email address). The lawful basis is that it is necessary to provide the service you asked for. We don't send marketing email.
- To keep it fair and secure (rate limits, stopping bots and multi-accounting). The lawful basis is our legitimate interest in a working, fair game.
- To improve it (counting visitors, signups and how many people come back, and reading feedback). The lawful basis is our legitimate interest in knowing whether the game works for people, using the least data that answers that.
Your username is public: it appears on leaderboards and league tables. Nothing else about you is shown to other players beyond your rank and returns.
No trackers, no ads, no selling
There are no adverts, no third-party analytics or tracking scripts, and no social media pixels. We don't sell or share your data with anyone for marketing.
Where it is kept
Tickertaka is hosted on Railway, which runs our servers and database, and our emails are sent through Resend, which receives your email address and the message to deliver it. Both process the data only on our instructions. Their infrastructure may be outside the UK (Resend is based in the United States); where data is transferred abroad we rely on the safeguards UK law requires for that.
How long we keep it
- Account and game data: while your account exists.
- Sessions: until you log out, or 30 days.
- An account whose email address is never confirmed: deleted after 48 hours.
- Email links: until used or expired (24 hours to confirm an address, 60 minutes to reset a password).
- IP-based rate-limit records: up to two days.
- Raw page views: 90 days, then deleted. The daily visitor salt is deleted after its day.
- Game events: for as long as the game runs, linked only to an account number.
- Feedback: as long as it's useful for answering you and improving the game, or until you ask us to delete it.
Deleting your account
Use Delete account on the Account page. We immediately wipe your username (replacing it with a random one), email address, password and sessions, remove you from every league, your watchlist and the leaderboards, and nobody can log in to the account again. Your past trades and holdings stay in the game's ledger under that anonymous name, because every credit in the market has to add up; they no longer identify you.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict it. Most of it you can see yourself on your statement and account pages, and you can delete your account yourself. For anything else, send a message through the feedback form with your username and how to reply. We may ask you to confirm the request from the email address on your account. You can also complain to the Information Commissioner's Office (ico.org.uk).
Children
Tickertaka is for people aged 13 and over. If you think someone under 13 has an account, tell us through the feedback form and we'll delete it.
Changes
If we change this policy we'll update it here and change the date at the top. See also our Terms.