Legal · terms of service · last updated 2026-05-29
Terms. Also the short version.
These terms cover using Tickbox — both the open-source SDK and the paid cloud dashboard. By installing the packages or signing in at app.tickbox.dev you agree to them.
1. Who we are
Tickbox is operated by Tiny Systems Ltd, a company registered in England & Wales ("we", "us"). Contact: hello@tinysystems.io.
2. The OSS SDK
The @tickboxhq/* packages are released
under the MIT licence. You can use, modify and ship them in
commercial products at no cost. The licence text in each package
governs — including the "as is, no warranty" part. Nothing on this
page restricts your rights under that licence.
3. The cloud service
The dashboard at app.tickbox.dev and the
ingest API at api.tickbox.dev are the
paid (and free-tier) hosted service. To use them you create an
account and keep your API keys confidential. You're responsible for
activity under your account and for having a lawful basis to collect
the consent records you send us.
We aim for high availability but the service is provided without an uptime guarantee unless you have a separate written Enterprise agreement.
4. Plans, billing & cancellation
- Every account starts on the Free tier — no card required.
- Paid plans (Entry £9, Pro £29, Unlimited £99 per month, in GBP) are billed monthly in advance through Stripe. Card data is handled by Stripe; we never see it.
- You can upgrade, downgrade or cancel anytime from the dashboard's billing page. Cancellation stops the next renewal; we don't refund the current period unless the law requires it.
- Plans carry usage limits (sites, monthly events, retention window). Exceed the event limit and ingest returns 429 until the next billing period or an upgrade.
- We may change prices with at least 30 days' notice to the account email; changes never apply to a period you've already paid for.
Prices shown exclude VAT where applicable; VAT is added at checkout based on your billing location.
5. Acceptable use
Don't use the service to break the law, send data you have no right to send, attempt to deanonymise visitors, probe or overload our infrastructure, or resell the hosted service as your own. We can suspend an account that does — we'll tell you why.
The audit log is designed to hold a salted/hashed visitor identifier, not raw personal data. Don't deliberately push direct identifiers (names, emails, raw IPs) into the event payload.
6. Your data
How we handle data is in the Privacy Policy. In short: the consent records you send remain yours; you can export them (CSV) or delete them (delete a site, or close the account) at any time. For the cloud service we act as your processor for those records; you're the controller.
7. Liability
Tickbox is a tool that helps you implement consent; it is not legal advice and using it doesn't by itself make you compliant. To the extent the law allows, our total liability for the service is capped at the fees you paid us in the 12 months before the claim, and we're not liable for indirect or consequential loss. Nothing here limits liability that can't be limited by law.
8. Changes & governing law
We may update these terms; material changes get a note in our release announcement and a new date at the top. Continuing to use the service after a change means you accept it.
These terms are governed by the laws of England & Wales, and the courts of England & Wales have exclusive jurisdiction.