Privacy Policy

1. Overview

Wickium is a marketplace and community for traders. We help people discover and compare trading indicators, automation, prop firms, platforms, and other tools, and we host a forum where users discuss them. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices you have.

We aim to collect only what we need to run the service and to be transparent about everything we do collect. If anything in this policy is unclear, email [email protected] and we will explain.

2. Information We Collect

2.1 Information you give us

• Account information. When you sign up via Clerk, we receive your email address, name (if provided), avatar (if provided), and a Clerk-assigned user ID. If you sign in with a third party (Google, etc.), we receive what that provider sends us.
• Profile information. Anything you add to your forum profile — display name, bio, avatar, banner image, links — is stored in our database and visible according to your profile visibility settings.
• Payment information. When you subscribe to Wickium Pro or buy tokens, Stripe processes the payment. We do not see or store your full card number. Stripe sends us a token, the last 4 digits, the card brand, and your billing country / ZIP for tax purposes.
• Content you submit. Forum posts, replies, ratings, reviews, comments, direct messages, marketplace items you list, brand-claim requests, and any image you upload.
• Communications. Emails you send to support@, legal@, etc., and any in-app messages you exchange with us or other users.

2.2 Information we collect automatically

• Usage data. Pages you visit, links you click, the category profiles you view, search queries, the order you do things, and timestamps. We use this to improve the site.
• Device and connection data. IP address, browser type, operating system, screen size, language, and referring URL. We use these for security, fraud prevention, and analytics.
• Affiliate click data. When you click an outbound link routed through /api/go we record the slug, label, and category of the link to track partner performance. We do not share your identity with the linked partner.
• Cookies and similar technologies. See Cookies & Tracking below.

3. How We Use Information

• To create and maintain your account and authenticate you on each visit.
• To provide, operate, and improve the Wickium service — including the forum, marketplace listings, search, and recommendations.
• To process payments for Wickium Pro and any future paid features, and to issue refunds.
• To send transactional email (welcome, receipts, password resets, forum notifications you have opted into, security alerts).
• To detect, prevent, and respond to fraud, spam, abuse, security incidents, and Terms of Service violations.
• To track aggregate site traffic and feature usage so we can prioritize improvements.
• To comply with legal obligations and enforce our Terms.

We do not use your personal information to train AI models, sell it to data brokers, or build advertising profiles for third parties.

4. How We Share Information

We share information only in these specific situations:

• With service providers who help us run the platform — listed in Third-Party Services below — under contracts that require them to protect your information and use it only to perform services for us.
• Publicly, when you choose to post. Anything you post in the forum, in a marketplace listing, in a public profile, or as a rating / review is visible to anyone who visits the page — including search engines.
• With other users you interact with. If you send a direct message, friend request, or follow, the recipient sees your username and avatar.
• For legal reasons. If we receive a valid subpoena, court order, or other lawful request, or if we believe in good faith that disclosure is necessary to protect rights, property, or safety, we may disclose information to law enforcement or other parties.
• In a corporate transaction. If Wickium is involved in a merger, acquisition, or sale of assets, your information may transfer with the business, subject to the protections of this policy.

We do not sell, rent, or trade your personal information for money.

5. Cookies & Tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the site is used. There are three categories:

• Essential. Required for the site to function — session cookies (Clerk), CSRF protection, our consent cookie. Cannot be disabled.
• Analytics. Google Analytics cookies that record aggregate, anonymized usage patterns. Off by default. Enabled only if you accept analytics in the cookie banner or in Cookie Settings.
• Marketing. Reserved for future advertising features. Off by default. Currently unused.

See our Cookie Policy for the full list of cookies, what each one does, and how long it persists. You can change your choices any time in Cookie Settings or in your browser.

6. Third-Party Services

We use the following third-party services to run the platform. Each has its own privacy policy governing how it handles your information.

• Clerk — Authentication and account management. Privacy policy →
• Stripe — Payment processing for Wickium Pro and tokens. Privacy policy →
• Supabase — Database hosting and storage. Privacy policy →
• Cloudinary — Image upload, transformation, and delivery. Privacy policy →
• Vercel — Application hosting and edge delivery. Privacy policy →
• Google Analytics — Aggregate traffic analytics (cookie-gated). Privacy policy →

7. Your Rights & Choices

Depending on where you live, you may have specific rights over your personal information. We honor the following for every Wickium user, regardless of jurisdiction:

• Access. Request a copy of the personal information we hold about you.
• Correction. Update or correct your information through your account settings or by emailing us.
• Deletion. Request that we delete your account and personal information. Some information may be retained where we have a legal obligation, an active dispute, or where it is part of public forum content others rely on (in which case we anonymize rather than delete).
• Portability. Request a machine-readable export of the information you have provided to us.
• Opt out of analytics. Disable analytics cookies in the banner or Cookie Settings.
• Opt out of marketing email. Use the unsubscribe link in any marketing email, or disable email notifications in your account settings. Transactional email (receipts, security alerts) cannot be turned off while your account is active.
• California residents (CCPA/CPRA). You have the right to know what categories of personal information we collect, request deletion, and opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioral advertising.
• EU/UK residents (GDPR). You also have the right to object to processing, restrict processing, withdraw consent, and lodge a complaint with your local data protection authority. The legal bases on which we process your information are: contract performance (running the service you signed up for), legitimate interests (security, fraud prevention, product improvement), consent (analytics cookies, marketing email), and legal obligation.

You can also email [email protected] from the email address on your account. We respond to verified requests within 45 days (and within 30 days for GDPR requests where applicable); account self-service export and deletion are immediate.

8. Data Retention

• Account information — kept while your account is active and for up to 12 months after deletion (for fraud prevention and dispute resolution). Then deleted or anonymized.
• Forum content — kept indefinitely as part of the public record, unless you specifically request deletion. Anonymized at deletion (post stays, author becomes "deleted user").
• Payment records — kept for at least 7 years to comply with U.S. tax and accounting laws.
• Server logs — kept for up to 90 days, then aggregated or deleted.
• Analytics data — kept by Google Analytics under their retention settings (currently 14 months, then aggregated).

9. Security

We use industry-standard practices to protect your information: TLS encryption in transit, encryption at rest for the database, role-separated keys (anonymous public read vs. service-role write), rate-limiting, and prepared statements. Authentication is handled by Clerk, which is SOC 2 Type II certified. Payment data is handled by Stripe, which is PCI DSS Level 1.

No system is perfectly secure. If we ever discover a security incident affecting your information, we will notify you in compliance with applicable breach-notification laws.

10. Children

Wickium is not directed at children. You must be at least 18 years old to create an account. We do not knowingly collect information from anyone under 18. If we learn that an account belongs to someone under 18, we will delete it. If you believe a child has given us information, email [email protected].

11. International Transfers

Wickium is operated from the United States, and our service providers may store and process your information in the U.S. or other countries. By using the service, you consent to this transfer. If you are in the EU/UK, we rely on Standard Contractual Clauses where required. You can request information about these safeguards by emailing [email protected].

12. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top, bump the version, and — if the change affects how we use your personal information — notify you by email or by an in-app notice before the change takes effect. Continued use of Wickium after a change means you accept the updated policy.

13. Contact Us

For privacy questions, requests under this policy, or anything else covered here, contact [email protected]. We respond from Wickium Media LLC, organized under the laws of Arkansas, United States. A physical service-of-process address is available on request and is on file with the Arkansas Secretary of State.