tiltline
Legal / Privacy

Privacy policy

This policy explains what tiltline collects through tiltline.com, the confirmed COT Brief, and the separate pilot request workflow, how we use it, and the choices you have.

Last updated: July 14, 2026

Scope

This policy applies to tiltline.com, confirmed access to the COT Brief, its release-triggered weekly email, the separate pilot request form, and related communications. Separate agreements for paid pilots, subscriptions, data feeds, or custom work may include additional privacy terms.

tiltline is intended for professional research and risk teams. Do not submit sensitive personal information, account credentials, or confidential trading instructions through the public form.

Information we collect

When you request a pilot, we collect the fields you submit: name, work email, firm, role, markets or watchlist notes, and the page URL that submitted the request. If you email us, we also collect the information included in that message.

When you request a COT Brief, we collect the email and selected market you submit, the consent version and time, source page and limited campaign attribution, confirmation and unsubscribe state, email delivery and suppression records, and market-scoped access-session records. Confirmation, access, unsubscribe, and email-link tokens are stored or verified in hashed or signed form rather than as reusable plaintext database values.

The backend records operational data needed to process the request, including request time, IP address, user agent, the raw submitted payload, CRM sync status, email delivery status, and related provider responses or errors.

We use Google Analytics on the public site. Google may set cookies or similar identifiers and receive information such as page views, referring pages, browser and device data, approximate location, and interactions with the site.

How we use information

  • Reply to pilot requests and send confirmation emails.
  • Confirm ownership and consent, unlock the selected COT market, and send one update after each new verified CFTC release.
  • Process immediate market-specific unsubscribe requests and suppress addresses after hard bounces or complaints.
  • Evaluate requested markets and decide whether a pilot is appropriate.
  • Maintain operational records in SQLite and, when configured, Twenty CRM.
  • Deliver, administer, or evaluate a pilot when one is separately agreed.
  • Protect the site, prevent abuse, debug failures, and improve the public page.
  • Measure site traffic and content performance with analytics.
  • Comply with legal, security, accounting, or contractual obligations.

The COT Brief and pilot request pipelines are separate. We do not add pilot requesters to COT email, add COT subscribers to a generic nurture sequence, or activate COT access or sending before confirmation.

Vendors and sharing

We do not sell personal information or rent contact lists. We share information only as needed to operate tiltline, respond to you, protect the service, or comply with law.

Current service categories include website hosting and database storage, Twenty CRM for pilot requests, SMTP2GO for confirmation and weekly-email delivery, Google Analytics, and basic business operations such as security, legal, and accounting support. COT mail is sent to one intended recipient without Bcc.

We may also disclose information if required by law, to protect rights or safety, or in connection with a financing, acquisition, reorganization, or sale of business assets.

Retention

Pilot request records are retained as long as needed to respond, operate or evaluate a pilot, maintain business records, resolve disputes, enforce agreements, and protect the service. We can delete or update contact records on request when we no longer need them for those purposes.

Pending COT confirmation links expire after 48 hours. Market-scoped browser access expires after 30 days. We retain consent, subscription state, delivery, unsubscribe, and suppression evidence as needed to operate the requested email, honor opt-outs, protect deliverability, and demonstrate the choices applied. We review or delete personal records when they are no longer needed for those purposes, subject to legal and security needs.

Your choices

You can avoid submitting the pilot form and contact us directly instead. You can block or delete cookies through your browser controls, and Google provides a Google Analytics opt-out browser add-on.

Every weekly COT email includes a market-specific unsubscribe link, and one-click unsubscribe stops queued and future weekly mail for that market immediately. To request access, correction, deletion, or a copy of your contact information, email support@tiltline.com. Depending on where you live, applicable law may provide additional privacy rights. We may need to verify your request before acting on it.

Security, children, and international use

We use reasonable administrative, technical, and operational safeguards, but no website, database, or transmission method is perfectly secure.

tiltline is intended for professional research and risk teams, not children. We do not knowingly collect information from children under 13. If you believe a child has submitted information, contact us and we will delete it where required.

Information may be processed in the United States or other places where our providers operate.

Changes and contact

We may update this policy as the site, vendors, or pilot workflow changes. The "Last updated" date shows the current version.

Questions: support@tiltline.com.