Privacy notice
Last updated: November 4, 2026
Controller: ATARY LTD. Company details and contact are in the terms.
Email updates and the waitlist
What we collect: your email address, your answers in the form, when you gave consent, and the country code Cloudflare derives from your IP address. Page views are only counted per day, language version and referring site; we don't store IP addresses. Nothing is stored on your device, except a language cookie if you choose a language yourself, your cookie choice, and Google Analytics cookies only if you accept them (see Analytics and cookies).
Why, and on what basis: to tell you about the launch and to gauge demand, based on your consent (Article 6(1)(a) UK GDPR and EU GDPR). No marketing, no sharing with third parties. Cloudflare processes technically necessary connection data to deliver the site (legitimate interests, Article 6(1)(f)).
Who processes it, and where: Cloudflare, Inc. (USA) hosts the site and database as our processor. Transfers to the US rely on the EU–US Data Privacy Framework and its UK Extension, and on standard contractual clauses.
How long: up to twelve months after the launch email, or until you withdraw consent, whichever comes first.
Your account and payments
What we store: your email address, when you signed in, and your passes (which country, amount, date, and Stripe’s payment reference). We don’t see or store card details. A cookie keeps you signed in for 30 days; signing out deletes it. To stop abuse, when you request a sign-in code we keep a one-way hash of your IP address for one day.
Signing in with Google: if you choose “Continue with Google,” Google learns that you’re signing in to this site, and we receive only your email address and your Google account ID. Google’s own privacy policy applies to that sign-in.
Product emails (only if you tick the box): we email you about new features, new countries, offers and the occasional request for feedback, at most twice a month, based on your consent (Article 6(1)(a) UK GDPR and EU GDPR). For this, Resend, Inc. (USA) stores your email address and language until you unsubscribe. We keep a record of when you opted in or out. You can withdraw anytime with the link in any of these emails or on your account page; that doesn’t affect emails sent before. Emails about a pass you bought, such as when its calculator opens, are part of the service and aren’t affected.
Why, and on what basis: to give you access to what you paid for (performance of a contract, Article 6(1)(b) UK GDPR and EU GDPR) and to keep the purchase records UK tax law requires (legal obligation, Article 6(1)(c) UK GDPR).
Who processes it, and where: Cloudflare, Inc. (USA) hosts the site and database. Resend, Inc. (USA) sends the sign-in emails. Stripe and its Link service process payments. Transfers to the US rely on the EU–US Data Privacy Framework and its UK Extension, and on standard contractual clauses.
How long: while your account exists. Purchase records are kept for as long as UK tax law requires, currently 6 years.
Contacting us
Contacting us on WhatsApp: the WhatsApp button only opens a chat with us; nothing is sent until you write. If you do, WhatsApp (Meta) processes the message under its own privacy policy, and we use it only to answer you.
Analytics and cookies (Google Analytics)
Only if you click “Accept”: to see which pages are used and where people get stuck, we use Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as our processor. Without your consent it isn’t loaded at all and sets no cookies.
What Google receives: the pages you open, steps such as “preview shown” or “checkout started” with the country concerned, and your browser, device type and approximate location derived from your IP address (Google Analytics 4 doesn’t store IP addresses). Google sets cookies (_ga, _ga_…) for up to 13 months. We never send your statement, figures, email address, account ID or file names, and ad features and Google signals are off.
Basis: your consent (Article 6(1)(a) UK GDPR and EU GDPR; for the cookies, regulation 6 PECR and Article 5(3) of the ePrivacy Directive, in Germany § 25(1) TDDDG, in Austria § 165(3) TKG 2021).
Where: Google may process the data in the US; Google LLC is certified under the EU–US Data Privacy Framework and its UK Extension.
How long: analytics data is deleted after 14 months.
Changing your mind: withdraw consent anytime with “Cookie settings” at the bottom of any page; we then delete the Google Analytics cookies. Your choice itself is kept in your browser’s local storage.
Feedback
Questions: the “Ask a question” button at the bottom right opens this same form. Questions are handled exactly like feedback, except that we need an email address to send you the answer.
What we receive: your message and the details listed in the feedback form: the page address (without personal details), language, country version, browser and operating system, screen width, light or dark mode, page version, the last error on the page, and whether you’re signed in. We never include your statements, file names, amounts, or cookies.
Your email address: if you’re signed in, we attach your account email so we can reply. If you’re not, we only have an email address if you type one in. We use it only to reply to that feedback, from atary@ataryc.com, never for marketing.
Why, and on what basis: to answer you and to fix and improve the site (legitimate interests, Article 6(1)(f) UK GDPR and EU GDPR).
Where, and how long: Cloudflare, Inc. stores feedback, including any email address, in the US, and it’s deleted automatically after 90 days. We also get a copy by email at atary@ataryc.com, sent through Resend, Inc. and stored in our Google mailbox (both in the US). We delete those emails, and our replies, once your request is handled, at the latest after 12 months. To limit abuse, we keep a one-way hash of your IP address for one day. To have your feedback deleted sooner, email us with its reference.
Your rights
Your rights: access, rectification, erasure, restriction, and portability. Email atary@ataryc.com to get a copy of your data or delete your account. You can also complain to the UK Information Commissioner’s Office or the data protection authority where you live.
Your rights: access, rectification, erasure, restriction, portability, and withdrawing consent at any time. You can complain to the UK Information Commissioner's Office or to the data protection authority where you live. Email us, or remove your entry here: