Privacy Policy

TradeTik is a demonstration storefront prototype. This notice explains what the prototype stores, where that information goes, and the choices available to you.

Cart session cookie (tradetik-cart): when you add an item, our server issues a signed, HttpOnly cookie with a random session identifier and a 30-day expiry. The identifier is generated on the server and is never derived from your IP address or browser fingerprint. Admin session cookie (tradetik-admin): if you sign in to the admin area, the server issues a second signed, HttpOnly cookie (8 hours) recording the role you may act as. Order details: if you complete the simulated checkout, the name, e-mail address, order lines, total and status you provided are stored in our database. No payment details are collected, because no payment is taken. Browser storage: in the default local mode, product, cart, order, language and translation-cache data are kept in your browser localStorage and stay on your device until you clear site data. Service-provider requests: product descriptions are sent to DeepSeek for machine translation, and product names are used as image-search queries at Pexels.

We use this information to operate the cart and checkout, to display the admin views, to translate catalogue text and to resolve product images. We do not build user profiles, and the prototype contains no analytics or advertising code.

The providers used to run the prototype are DeepSeek (translation), Pexels and picsum (imagery), Turso (database hosting) and Vercel (application hosting). Cloudflare is used only for domain registration and DNS; it does not receive visitor data from this prototype. We do not sell personal data.

Cookies expire at the end of the lifetime stated above. Orders remain in the database until the operator deletes them. Data held in your browser remains until you clear it yourself.

Deleting cookies or site data empties the cart and ends any admin session. If you are in the EEA, the UK or California, you may ask the operator to access or delete the order details you submitted. The prototype has no self-service tool, so these requests are handled manually.

Sessions are signed with a server-side secret, and API keys never reach the browser. This prototype is provided as is, without any guarantee of availability, accuracy or fitness for a particular purpose.

This notice may change as the prototype evolves. Questions can be sent through the contact link in the footer.