Legal
Privacy policy
Last updated: 12 June 2026.
What we collect
- Email address, to deliver ticket-drop alerts and account communications.
- Court and day preferences, so we only email you about drops you care about.
- Payment data, processed entirely by Stripe. We store only the payment status, amount, and a Stripe reference; we never see or store card details.
- Account credentials, if you create an account, your sign-in details are stored hashed by our authentication provider.
- Basic technical data, IP address and request metadata, kept briefly for security (rate-limiting and abuse prevention).
Why we collect it
To run the service: detect ticket drops, send you alerts, process your payment, and let you manage or cancel your subscription.
How long we keep it
Your subscriber record is kept through the Wimbledon 2026 men's final (~13 July 2026), then deleted within 30 days. Payment records are kept for 7 years for tax/accounting compliance. You can delete your account at any time from the account page.
Who processes your data
- Lovable Cloud, database, authentication, and email delivery.
- Stripe, payment processing (PCI-DSS Level 1).
- Lovable / Cloudflare, site hosting and content delivery.
All processors are GDPR-compliant. We do not share your data with anyone else and we don't sell it.
Your rights
Under UK/EU GDPR you have the right to access, correct, export, or delete your personal data. Use the account page for self-service, or email us using the address below for anything else. We respond within 30 days.
Unsubscribe and account deletion
Every alert email contains a one-click unsubscribe link that immediately cancels your alerts. To also delete your sign-in account, use the account page.
Cookies & local storage
We use only essential storage: a sign-in session cookie/local-storage entry from our authentication provider, kept until you sign out. No tracking, advertising, or analytics cookies.
Contact
Email privacy@wimtix-alert.app for any privacy question or request.