Privacy policy
This page explains what tkx.org collects, why, and what you can do about it. TKX collects as little as the service needs, keeps its analytics free of cookies and IP addresses, and never sells personal data.
Who is responsible
TKX (“we”) operates tkx.org, its language subpaths, the public data API and the TKX Agent. For any privacy request, write to the address at the end of this page.
What we collect
- Browsing: page views, referrers, country and device class, through a self-hosted analytics instance (Umami). It sets no cookies and does not store your IP address.
- Server logs: our web server keeps standard access logs (IP address, requested URL, user agent) for security and debugging. They roll over automatically and are kept for a limited period.
- Account: email address, a salted password hash (we never store the password itself), company name, contact details and role, plus the one-time codes used to verify your email. A signed-in session is kept in the tkx_s cookie for up to 30 days.
- Marketplace submissions: company legal name, registration number, contact details and the content of your listing, request or project. Contact details are never published; enquiries are relayed by TKX.
- TKX Agent: your messages, the structured draft the Agent builds from them, your language and, for anonymous sessions, your IP address (used only to tie the session to you). Messages are sent to third-party language-model providers — currently DeepSeek and Moonshot AI — to generate replies. Do not paste secrets or other people's personal data into the Agent.
- Email: transactional messages (verification codes, receipts, relayed enquiries) are sent through Resend.
Cookies and local storage
Signed-out visitors receive no cookie from TKX. The only TKX cookie is the session cookie set when you sign in (httpOnly, secure, 30 days). Preferences such as theme, language, currency, sort basis and watchlist live in your browser's local storage and never leave your device. Advertising cookies set by Google are described below.
Advertising
Pages may display ads served by Google AdSense. Google and its partners use cookies to serve ads based on your prior visits to this or other websites and to measure them. You can opt out of personalised advertising in Google's Ads Settings, or at aboutads.info for other vendors. In the EEA, the UK and Switzerland a consent message is shown before any advertising cookie is set. How Google uses data from partner sites is described at the link below.
google.com/settings/ads · aboutads.info/choices · policies.google.com/technologies/partner-sites
How we use data
To run the service you asked for (accounts, submissions, relays, Agent sessions); to keep the site safe (abuse prevention, quotas, session ownership); to understand usage in aggregate; and to send the transactional email the service requires. We do not sell personal data, do not build advertising profiles ourselves, and make no automated decisions with legal effect about you.
Where data goes
- Hosting: Tencent Cloud, Hong Kong — all databases and logs live there.
- Email delivery: Resend (United States).
- Agent replies: DeepSeek and Moonshot AI (China) receive the content of Agent conversations.
- Advertising: Google (AdSense), under the terms above.
- Market data sources (exchanges, quote services, provider price pages) receive no personal data from us.
Retention
Sessions expire after 30 days. Accounts and submissions are kept while your account exists and are deleted on request. Agent sessions are kept so a conversation can be resumed, and are deleted on request. Analytics contain no personal identifiers.
Your rights
You can ask to access, correct or delete the personal data we hold about you, or object to a use of it, by emailing us. We answer within 30 days. If your jurisdiction has a data-protection authority, you may also complain to it.
Security
All traffic is encrypted (TLS). Passwords are stored as argon2id hashes and session tokens only as hashes; internal services are not reachable from the public internet. No system is perfectly secure — if you believe your data has been exposed, contact us immediately.
Children
TKX is a professional service and is not directed at anyone under 18. We do not knowingly collect their data.
Changes
We update this page when our practices change and show the effective date at the top. Material changes are announced on the site.
Contact
Privacy requests: echo@minax.io
About · Privacy · Terms · Methodology