This policy explains what TulipLot collects, why, and the choices you have. It covers the TulipLot web app, the public content site, and the optional Chrome companion extension.
Information we collect
- Account data: your email address, display name, and (for password accounts) a bcrypt hash of your password. If you sign in with Google, we store your Google subject identifier.
- Dashboard data: the cells you configure — the URLs, titles, and icons you add to your grid.
- Billing data: a Stripe customer and subscription identifier. Card numbers are handled entirely by Stripe; TulipLot never receives them.
- Session data: a first-party, httpOnly session cookie scoped to
.tuliplot.comthat keeps you signed in.
Advertising and cookies
The free tier shows a single advertisement in the bottom-right cell of your dashboard. These ads are served by Google AdSense. Google and its partners use cookies and similar technologies — including the DoubleClick/Google advertising cookie — to serve ads, measure performance, and, where you consent, personalize the ads you see.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to TulipLot and other websites.
- In the EEA, the UK, and Switzerland we present a Google-certified consent management platform (Consent Mode v2 / IAB TCF v2.2). Advertising and its cookies load only after you grant consent. Until then, no AdSense script runs.
- You can review and change your advertising choices at Google Ads Settings, and opt out of personalized advertising from participating vendors at aboutads.info/choices and youronlinechoices.eu.
- Premium subscribers see no ads and no advertising cookies.
How we use your data
We use your data to operate the service: authenticate you, store and render your dashboard, process subscriptions, and serve (for free accounts) advertising. We do not sell your personal data.
Data retention and deletion
Account and dashboard data persist until you delete your account. Stripe webhook events are retained briefly for idempotency and then expire automatically. To request deletion, email [email protected].
Your rights
Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to withdraw advertising consent at any time via the consent controls on the site.
Changes
We will update this page when our practices change and revise the “last updated” date above.