Privacy

Tactile UI is run by one person, Ciprian Titire, in the United Kingdom. This page says what the site keeps about you, why, for how long, and how to have it removed. The short version: the email your Google or GitHub account gives us, what you bought, and a small log of what happened on your account. Visits are counted by a visit counter that sets no cookies (below). No advertising, nothing that follows you from site to site, nothing sold or shared for marketing.

What we keep, and why

• Your account. When you sign in with Google or GitHub we receive your email address (only if the provider has verified it), your name as that provider shows it, the address of your profile picture there, and the provider's id for you. We keep these to know it is you next time, to link both sign-in methods to one account when they share an email, and to show your name and picture back to you. Your picture is fetched by our server, not your browser, so Google and GitHub do not see your visits; we keep a copy in memory for a few hours and never on disk. We never receive or store your Google or GitHub password, and the access the provider grants is used once, at sign-in, then thrown away.
• What you bought. Which Pass you own, when, the amount and currency, and the Stripe references for the payment, so that what you paid for opens wherever you sign in, and so refunds work.
• Referrals. If you arrived by someone's link, the link's code is kept with your purchase; if someone buys through yours, we keep that so we can pay you back your reward.
• The emails we send you. A welcome when you first sign in, a receipt when you buy, and a note when your link earns you something. Only those, and the weekly email below. They are delivered by Resend, which receives your address and the email's text to send it.
• A short activity log. Sign-ins, checkouts started, payments, refunds, downloads and emails sent, with the time. It is how we answer "did my purchase go through?" and notice abuse.

Votes and the weekly email

If you own a Pass or the kit you can vote each week on what gets made next, for the pieces that come with what you own. Your vote is stored with your account so you can change it until the round closes, and the site only ever shows the totals.

If you own something you can also suggest a piece for the backlog, three a week. We store what you write with your account so we can review it, and only we see it. If it goes into the backlog, the roadmap shows your first name and nothing else ("suggested by Ana"). Deleting your account deletes your suggestions.

We email the vote once a week at most. If you bought something, we send it when it is about what you bought, because that is in your interest and ours (legitimate interests, under the UK GDPR). Tick "No weekly vote email, thanks" beside the buy button and we never send it. Everyone else gets it only if they tick the box for it. Every email has a one-click stop, and so does your account page: we stop at once, for free. We keep a note of which emails we sent you and when, so nobody gets two in a week, apart from that one note the day founder seats open. Deleting your account deletes your votes and all of this with it.

The seats list ("Email me when seats open")

This is a mailing list of people who asked to hear when the founder seats open. The box is unticked everywhere and is never ticked for you, and buying something does not put you on it. You can tick it in three places: as you sign in, on the pricing page, and on your account page. When you tick it we save that you did, the date and time, and which of those places it was. Being on the list gets you one note the day founder seats open and the weekly vote: a few emails in all, no more than one a week apart from the seats note, and nothing else. We use your consent as the legal basis (PECR and the UK GDPR). We never sell the list or share it. To stop, use the one-click stop link at the bottom of any of these emails, or untick the box on your account page. We stop at once, keep a note of when you stopped, and ask nothing further.

You can also join with just an email address, without an account, from the Remind me box on the home page and the pricing page. We email you once to ask you to confirm, and keep nothing on the list until you press the link (an unconfirmed address and its link are deleted after a day). Once you confirm we keep that address, the time you confirmed and that it came from the Remind me box, for the same two emails and on the same basis; if you later sign in with that address it is the same account and the same consent. Every email has the one-click stop.

Payments

Payments are taken by Stripe, which sells the Pass as merchant of record: Stripe collects your card or other payment details, the billing address it needs and the tax it must charge, under Stripe's privacy policy. We never see or store your card number.

Cookies and storage

• tui_session: keeps you signed in (30 days). Essential.
• tui_flow: lives for the ten minutes of a sign-in, to check the reply really came from the sign-in you started. Essential.
• tui_ref: the referral code from a friend's link, for 30 days, so their discount reaches your checkout.
• tui_mail: only if you tick the weekly-email box as you sign in: it keeps the tick for the ten minutes you are away at Google or GitHub. Essential.
• tui-finish and tui-family in your browser's local storage: the finish you chose (aluminium, graphite, porcelain or black) and its family, if you chose one.

There are no advertising cookies.

The visit counter

Every page loads one script from another address: the Umami visit counter, from stats.tactileui.dev, a server we run. It sets no cookies and stores nothing in your browser. For each page you open it records the page's address, the site that sent you there, your browser, operating system and kind of device, your screen size, your language and your country. It works out the country from your IP address and does not keep the address. We see these as totals, never as a person. Besides visits it counts three moments: a sign-in (and whether you ticked the weekly email), a checkout opening, and a purchase, with no name, email or account attached. Browsers that ask not to be tracked (Do Not Track) are not counted. If you arrive from a link with campaign tags (utm_source and the like), those tags are kept in that browser tab only and added to the visit counts, never stored by us.

Where it lives

On a server we rent and run ourselves, in a data centre in Sofia, Bulgaria (in the EU), in one database file, backed up nightly. Sign-in goes through Google or GitHub; payment through Stripe; our emails through Resend; nothing else receives your data.

How long

Your account and purchases are kept while you have an account. The activity log is kept for up to two years. Backups roll over within fourteen days. Stripe, as the seller of record, keeps its own records of the payment for as long as tax law requires it to.

Your rights

Under UK data protection law (the UK GDPR) you can ask for a copy of what we hold about you, have it corrected, or have your account deleted. Deleting it removes everything we hold about you (sign-in, purchases, referral link and activity) from the live database at once, and from backups within fourteen days. What you bought stops opening on the site; files you downloaded before stay licensed to you, so download them first. Write to ciprian.titire@gmail.com from the email on your account; we answer within a month. You can also complain to the Information Commissioner's Office (ico.org.uk).

Changes

If this page changes, the date below changes. If a change affects what we keep about you, we tell you before it applies.

Last updated 11 October 2026.