Privacy Policy

Last updated: September 6, 2026

Who controls your data

Until the Last Cat is an independent game project operated by:

Apoema Berrokan

Privacy contact: hello@untilthelastcat.com

Apoema Berrokan is the data controller for the personal data described in this Privacy Policy.

What we collect

A. Waitlist Signups

When you sign up for the Until the Last Cat waitlist, we may collect and store the following information:

  • Email address
  • Preferred platform
  • Confirmation of consent
  • Source of the signup
  • Signup date and time
  • Internal database identifier

The waitlist application does not store IP addresses in the waitlist database or in its rate-limit records.

For automated abuse prevention and rate limiting, the signup service generates a temporary HMAC-SHA256 derived identifier from the normalized email address.

Rate Limiting Privacy Safeguards:

  • The raw email address is NOT stored in the rate-limit bucket.
  • Temporary rate-limit records expire automatically after approximately 10 minutes.

B. First-Party Website Analytics

We collect minimal first-party analytics events to understand aggregate website performance and interaction trends. These events may record only:

  • Usage event type (e.g., page view, CTA interaction, video playback, feature selection)
  • Properties strictly associated with the specific event (such as platform preference or button location)
  • Campaign and traffic source parameters: utm_source, utm_medium, and utm_campaign
  • Referring website hostname (referrer_host, stored only as a domain/hostname, not a full URL)

Analytics Privacy Safeguards:

  • The analytics database does not store IP addresses.
  • The analytics schema does not include dedicated fields for email addresses or contact details, and our analytics instrumentation is not designed to collect them. We do not intentionally collect contact information through website analytics.
  • No cookies, session IDs, user IDs, or persistent device fingerprints are used.
  • The analytics instrumentation does not collect the full page URL or the full query string. It records only the specific UTM parameters listed above and the referring website hostname.

Why we collect it

We collect and process this data strictly for the following purposes:

Waitlist Operations:

  • To maintain the launch waitlist
  • To notify you about the official launch of Until the Last Cat
  • To send relevant project and game updates to users who explicitly consented
  • To prevent automated abuse and protect the signup endpoint

First-Party Website Analytics:

  • To understand aggregate usage and navigation trends on the landing page
  • To measure campaign acquisition performance and referral channels
  • To identify which page features and preview elements receive engagement
  • To improve website performance, content, and user experience

We do not engage in behavioral advertising, and we do not sell or monetize your personal data or analytics records.

Legal basis

Waitlist and Communications:

Processing of waitlist data and sending project communications is based on your explicit consent provided at the time of signup.

You have the right to withdraw your consent at any time by sending an email to hello@untilthelastcat.com.

Withdrawing your consent will result in the removal of your information from the active waitlist. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Providing a valid email address and consent is voluntary, but without them you cannot join the waitlist or receive launch updates.

First-Party Website Analytics:

Processing of minimal, first-party analytics data is based on our legitimate interests in understanding website performance, measuring campaign effectiveness, and improving user experience. This lightweight telemetry operates without cookies, without persistent identifiers, without individual profiling, and is never used for behavioral advertising.

How long we keep the data

Waitlist Data:

Waitlist signup data is kept until 12 months after the public launch of Until the Last Cat, or until the user asks for deletion, whichever happens first.

Analytics Events:

First-party analytics events follow a 90-day retention policy. Records older than 90 days are deleted opportunistically when the analytics ingestion mechanism processes a new event.

Temporary rate-limit records expire after approximately 10 minutes.

Service providers

We rely on trusted third-party infrastructure providers to operate the website:

Supabase

Supabase provides managed database infrastructure used to store waitlist signups, execute server-side rate limiting, and record first-party analytics events. The Supabase project is hosted in a European region (EU).

Your rights

Depending on applicable data protection laws, you may have the right to request:

  • Access to the personal data we hold about you
  • Correction of inaccurate or incomplete data
  • Deletion of your personal data
  • Restriction of processing of your personal data
  • Data portability where applicable
  • Withdrawal of your consent at any time

To exercise any of these rights, please contact us at: hello@untilthelastcat.com

You also have the right to lodge a complaint with a competent data protection supervisory authority if you believe your data has been handled improperly.

Data sharing

We treat your data with utmost care. Waitlist and analytics data:

  • Are not sold
  • Are not rented
  • Are not shared for behavioral advertising

Your data is only processed by necessary service providers (such as Supabase) required to operate the infrastructure described in this policy.

Security

We implement reasonable technical and organizational measures to safeguard your personal data against unauthorized access, loss, or misuse. However, no transmission over the Internet or electronic storage method is completely without risk, and absolute security cannot be guaranteed.

Changes to this policy

We may update this Privacy Policy from time to time, including in scenarios where:

  • Waitlist functionality or project features change
  • New service providers or processors are added
  • Analytics or tracking tools are updated
  • Legal or regulatory requirements change

Any updates will be reflected on this page with a revised "Last updated" date.