Privacy Policy

Effective Date: September 4, 2025. Domain: tlap.io. Controller: TLAP (“we,” “us,” “our”) — info@tlap.io. This Privacy Policy explains how we handle personal data on tlap.io (the “Site”). The Site currently operates as an informational resource and does not run user accounts or registrations.

1) Scope and who we are

This Policy applies to visitors of tlap.io. For EEA/UK users, TLAP is the data controller of personal data collected via the Site. For California residents, this Policy also serves as our notice at collection under CPRA.

2) What we collect (current state)

• No non-essential tracking today: we do not use analytics, advertising pixels, or similar non-essential technologies at this time.
• Technical/operational data: when you access the Site, our hosting/CDN and security layers may automatically process limited technical data such as IP address, timestamp, URL, user-agent/device information, referrer, and basic event logs necessary to deliver pages, prevent abuse, and ensure availability.
• Direct communications: if you email us (e.g., info@tlap.io), we process your message and contact details to respond.

We do not intentionally collect sensitive categories of data, nor do we profile visitors.

3) Lawful bases & purposes (EEA/UK)

Where GDPR/UK GDPR applies, we rely on legitimate interests to operate and secure the Site (serving pages, DDoS mitigation, fraud prevention, basic logging); consent (future state) for any non-essential cookies/trackers before they load in the EEA/UK; contract/pre-contract (future state) if we introduce accounts or paid features you request; and legal obligation where retention is required by law.

4) Cookies and similar technologies

Today: only strictly necessary technologies may run to deliver and protect the Site. Future: if we enable Google Analytics 4 (or equivalents), Google Ads (or equivalents), reCAPTCHA v2/v3, or third-party embeds (market charts, video players), we will (i) update this Policy, (ii) show a consent banner where required (EEA/UK), and (iii) provide a Cookie Settings control. See our separate Cookie Policy for details.

5) Disclosures to third parties

Current state: we do not disclose personal data to third parties for analytics or advertising because such services are not enabled. Operationally necessary providers (hosting, CDN, security, backup/migration tools) may process limited technical data as our processors. Future state (if enabled): analytics providers (e.g., GA4), advertising/attribution (e.g., Google Ads), security/anti-abuse (e.g., reCAPTCHA), embeds/widgets (charts, video players) and support. We will disclose purposes, providers and controls in the Cookie Policy and this Policy.

6) Partner Links

We display an “Our Partners” banner block with outbound links to third-party exchanges and services. These links are served as standard hyperlinks from tlap.io. Any data collection or cookies that occur after you follow a link are governed by the partner’s own privacy policy.

7) “Selling” or “sharing” (CPRA, California)

Today: we do not sell or share personal information as defined by CPRA. If this changes (e.g., enabling advertising/retargeting), we will update this Policy and provide a “Do Not Sell or Share My Personal Information” link. We will also honor Global Privacy Control (GPC) signals for applicable processing.

8) International transfers

We may process data on servers outside your country (e.g., via global hosting/CDN). Where required, we implement safeguards (such as Standard Contractual Clauses) to protect personal data subject to GDPR/UK GDPR.

9) Data retention

We retain personal data only as long as necessary for the purposes described above, including to operate and secure the Site, handle your communications, and comply with legal obligations. Operational logs are kept for limited periods appropriate to security and troubleshooting needs.

10) Security

We employ reasonable technical and organizational measures to protect personal data (hardened hosting, CDN/security services, least-privilege access, backups). No method of transmission or storage is fully secure; residual risk remains.

11) Your rights

EEA/UK (GDPR/UK GDPR): access, rectification, erasure, restriction, portability, objection (including to processing based on legitimate interests), and the right to withdraw consent at any time (without affecting prior lawful processing). You may also lodge a complaint with your local data protection authority.

California (CPRA): right to know/access, deletion, correction, and to opt out of selling/sharing (not applicable today), as well as the right to limit use of sensitive personal information (not collected). We will not discriminate for exercising your rights.

To exercise rights, contact info@tlap.io. We may request information to verify your identity.

12) Children’s privacy

The Site is directed to adults interested in trading-related content. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact info@tlap.io and we will take appropriate action.

13) Third-party sites

The Site contains links to third-party websites (including partner exchanges). We are not responsible for their privacy practices. Review the privacy policies of any site you visit.

14) Changes to this Policy

We may update this Policy to reflect technical or legal changes. Updates are effective upon posting with the revised Effective Date. Material changes will be highlighted or otherwise notified where appropriate.

15) Contact

Questions or requests about this Policy or your personal data: info@tlap.io.