Trickifi Privacy Policy

2.1 Account information

When you create an account, we collect your email address, your chosen Stagename, and the invite or Affiliate code you used to register. Your password is stored only as a one-way hash; we never see it in plain text. If you set up the optional six-word recovery phrase, the phrase itself never reaches our servers. If you enable two-factor authentication, we store the credential needed to verify your codes.

2.3 Encrypted content

The contents of your repertoire (tricks, acts, routines, techniques, backstage records such as magicians, literature, communities, events, props, stores, media, and websites, plus journal entries, scripts, photos, audio, video, and attachments) are encrypted on your device before they are uploaded. We store the resulting ciphertext, plus the nonces and identifiers needed to retrieve it, but we cannot read it. We refer to this category in this Policy as “Encrypted Content.”

2.5 Device, network, and security data

Your account security is paramount. We collect data needed to keep your account and our infrastructure secure, including IP address, browser type and version, device type and operating system, approximate location derived from IP, device fingerprint signals (including those provided by our bot and abuse-detection provider), session identifiers, login timestamps, and authentication-related events such as failed login attempts and password resets. Recent login activity is visible to you under Settings → Security → Recent Activity for the prior 30 days.

2.6 Communications

If you contact support, abuse, security, legal, billing, or privacy, we receive your message and any attachments, your email address, and metadata about the conversation. If you respond to a Trickifi survey, post a public review, or interact with our social channels, we receive what you submit.

2.7 Cookies, pixels, analytics, and advertising signals

We and our service providers use cookies, pixels, SDKs, and similar technologies on our marketing site and on portions of the Service to remember you, run analytics, deliver and measure advertising, and protect against fraud. See the Cookie Policy in Appendix A for details, including categories, providers, and how to opt out.

2.8 Information from third parties

We may receive limited information about you from third parties, including:

• Identity, anti-fraud, and bot signals from our security and abuse-prevention providers;
• Payment, tax-form, and Connect-account signals from Stripe;
• Email deliverability signals from our email delivery providers (for example, bounces and complaints);
• Advertising attribution and conversion signals from our advertising and analytics providers; and
• Public social-media metrics or sales data you submit (or authorize us to access) as part of your Affiliate application.

5.1 With service providers

We use third-party service providers to host and operate the Service. They process information on our behalf under contracts that restrict their use of the information to the services they provide to us. See Section 6 for the categories of providers we engage.

5.2 With other magicians

When you share a record with another magician under Section 5 of the Terms, the recipient sees what you share. When you participate in Affiliate features, recipients of your Affiliate links receive the content you distribute and the Affiliate badge information you make public.

Your public profile information (Stagename, profile image, headshot, and anything else you have chosen to publish) is visible to other magicians inside the Service. As we launch additional social and community features (such as leaderboards, peer-to-peer messaging, Jam Sessions, and similar surfaces), portions of your account activity and public profile may be visible to other magicians in those contexts. We will describe the specific exposure for each feature in-product before you opt in, or in the Service as the feature launches.

5.3 With advertising and analytics partners

Subject to the consent rules in the Cookie Policy and Section 9, we share limited device, browser, and behavioral signals with our analytics and advertising providers to measure performance and to deliver ads. Some of these providers act as “selling” or “sharing” parties for purposes of state privacy laws; the Cookie Policy and Section 11 explain your opt-out rights.

5.4 For legal reasons

We may disclose information when we believe in good faith that disclosure is required by law (including in response to a valid subpoena, warrant, or court order), is necessary to protect the rights, property, or safety of Trickifi, our users, or the public, or is necessary to prevent fraud or abuse.

Because of our zero-knowledge architecture, our ability to respond to legal requests is structurally limited: we can produce the account-level metadata, billing data, and operational data we hold, but we cannot produce the contents of Encrypted Content because we cannot decrypt it. We will inform you of legal requests for your information unless we are prohibited from doing so or unless we believe doing so would risk serious harm.

5.5 In a corporate transaction

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of substantially all assets, information may be transferred to the successor or acquirer as part of that transaction, subject to a privacy commitment at least as protective as this Policy. In any such transaction, your Encrypted Content remains encrypted under the same zero-knowledge architecture; a successor or acquirer inherits ciphertext they cannot read.

5.6 With your consent

We share information for any other purpose with your consent.

8.3 Backup expiry

Encrypted Content and operational data may persist briefly in backups after deletion (typically up to 30 days) before backup expiry purges them. Backups cannot be used to recover deleted accounts.

9.1 Access and portability

You can view your account information and unencrypted activity in Settings. On request, we will provide a copy of the unencrypted personal data we hold about you in a structured, commonly used, machine-readable format. We cannot include the substance of your Encrypted Content because we cannot decrypt it.

9.2 Correction

You can update your email, Stagename, password, recovery phrase, public profile information, and account preferences in Settings. For other corrections, contact privacy@trickifi.com.

9.4 Marketing opt-out

You can unsubscribe from marketing email at any time using the link in any marketing email or by emailing privacy@trickifi.com. Transactional messages (signup confirmations, security alerts, billing notices, mastery digests for which you have signed up) continue while your account is open.

9.5 Cookies, analytics, and advertising

You can manage non-essential cookies and similar tracking through the cookie banner shown on first visit and through the cookie preferences link in the site footer. Where required by law, we will not load non-essential cookies until you consent. See Appendix A for details, including provider-specific opt-out links.

9.6 Account controls inside the Service

You can enable two-factor authentication, view recent login activity, sign out of other sessions, rotate your recovery phrase, and change your email or password from Settings → Security.

9.7 Region-specific rights

See Section 11 for additional rights available to residents of the EEA, UK, Switzerland, California, Colorado, Virginia, Connecticut, Utah, and other jurisdictions with applicable privacy laws.

10.1 Breach notification

If a personal-data breach occurs that is likely to result in a risk to your rights, we will notify the relevant authorities within the timeframes required by law (for example, within 72 hours under the GDPR), and we will notify affected users without undue delay where required by law or where we believe it is in your interest.

11.1 California (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what categories of personal information we have collected, the sources, the purposes, and the categories of recipients;
• Access and receive a copy of the specific pieces of personal information we hold;
• Request deletion of personal information we have collected, subject to legal exceptions;
• Correct inaccurate personal information;
• Opt out of “sale” and “sharing” of personal information for cross-context behavioral advertising;
• Limit the use of “sensitive personal information,” to the extent we use it for purposes that trigger this right; and
• Be free from discrimination for exercising any of these rights.

To exercise these rights, email privacy@trickifi.com or use the “Do Not Sell or Share My Personal Information” link in the site footer. We will verify requests by matching the request against information associated with your account. You may use an authorized agent; we may require written authorization.

Categories collected, sources, purposes, recipients. In the prior 12 months we have collected the following categories of personal information for the purposes described in Section 3, from the sources described in Section 2, and shared them with the categories of recipients listed in Sections 5 and 6: identifiers (email, account ID, IP address); commercial information (subscription, payment, Affiliate earnings); internet activity (usage, device, log data); geolocation (approximate, from IP); audio, electronic, or visual information (uploaded media, in encrypted form); inferences from operational data; and professional or employment information (Affiliate status). Sensitive personal information collected is limited to account credentials.

Selling and sharing. We do not sell personal information for money. We do share online identifiers with our advertising and analytics providers to deliver and measure advertising. You may opt out as described above.

11.2 Colorado, Virginia, Connecticut, Utah, and similar U.S. state laws

If you are a resident of Colorado (Colorado Privacy Act), Virginia, Connecticut, Utah, or another state with a comprehensive privacy law, you have rights similar to those described for California, including the rights of access, deletion, correction (where applicable), portability, and opt-out of targeted advertising, sale, and certain profiling. To exercise these rights, email privacy@trickifi.com. You may appeal a decision regarding your request by replying to our response and clearly stating that you are appealing.

11.3 European Economic Area, United Kingdom, Switzerland (GDPR / UK GDPR)

If you are in the EEA, the UK, or Switzerland, the GDPR or UK GDPR applies to our processing of your personal data. Our legal bases are described in Section 3.1. In addition to the rights described in Section 9, you have the right to:

• Object to processing based on legitimate interests, including profiling;
• Request restriction of processing in certain circumstances;
• Withdraw consent (where consent is the legal basis), without affecting the lawfulness of prior processing; and
• Lodge a complaint with your local supervisory authority.

The controller of your personal data is Trickifi Limited. To exercise your rights, contact privacy@trickifi.com.

11.4 Brazil (LGPD)

If you are in Brazil, the LGPD applies. You have rights of confirmation, access, correction, anonymization, blocking or deletion, portability, information about sharing, and withdrawal of consent. To exercise these rights, contact privacy@trickifi.com.

11.5 Other jurisdictions

If a privacy law in your jurisdiction provides rights similar to those described in this Section 11, we will honor those rights to the extent the law requires.