# Privacy notice

Last updated October 1, 2026

This notice covers aftertale.app: the waitlist and the site’s visit statistics. The app’s own privacy policy will be published here when Aftertale launches.

## Who is responsible

Aftertale is made by Paulo Pereira, based in Portugal (EU), who is the controller of the data described here. Write to [support@aftertale.app](mailto:support@aftertale.app) about anything in this notice.

## The waitlist

If you join the waitlist, the email address you type into the form, and nothing else from that form.

Cloudflare, which hosts the site, processes standard request data such as IP addresses to deliver pages and protect the site from abuse.

Your address is used to send you one email when Aftertale is available on the App Store, and occasional updates about Aftertale. The legal basis is your consent (Article 6(1)(a) GDPR). Every email has an unsubscribe link, and you can withdraw consent at any time.

The list is stored with [Resend](https://resend.com/legal/privacy-policy), the email service that sends these emails, acting as a processor. Resend is based in the United States; transfers there are covered by Resend’s data processing agreement and the safeguards the GDPR requires for them.

Your address is never sold, rented or shared with anyone for advertising.

Your address is kept until you unsubscribe or ask for it to be deleted. If you unsubscribe, it is kept only as a suppression record so that no further email is sent to it.

## Visit statistics

The site counts visits with [DataFast](https://datafa.st), in its cookieless mode: it sets no cookies and no advertising identifiers. To tell one visit from another, DataFast derives a hashed identifier from your IP address and browser user agent with a salt that changes about every 24 hours, so visits on different days are not linked, and it keeps a session value in your browser’s session storage that is cleared when you close the browser.

DataFast processes your IP address, browser and device type, country, the pages you view, the site that referred you, and a few actions on the page: joining the waitlist (without your email address), playing a story’s opening, and opening an answer in Questions. The purpose is to understand which parts of the site help people decide, on the basis of legitimate interest (Article 6(1)(f) GDPR). Nothing is used for advertising or sold.

DataFast is run by JustShipIt Pte. Ltd. (Singapore) and acts as a processor under its [data processing agreement](https://datafa.st/dpa). Its infrastructure includes providers outside the EU, including in the United States, with the GDPR’s Standard Contractual Clauses where relevant. Statistics are kept for as long as Aftertale uses DataFast. To opt out, block `datafa.st` with a content blocker or your browser’s tracking protection; the site works the same without it.

## Your rights

You can ask to see, correct or delete your data, object to its use (including the visit statistics), or withdraw your consent, by writing to [support@aftertale.app](mailto:support@aftertale.app). You can also complain to Portugal’s data protection authority, the [Comissão Nacional de Proteção de Dados (CNPD)](https://www.cnpd.pt).

---

[Aftertale](https://aftertale.app/) · [About](https://aftertale.app/about) · [Contact](https://aftertale.app/contact) · [llms.txt](https://aftertale.app/llms.txt)