Double Dot

Privacy

Last updated 15 September 2026. This notice covers doubledot.site, the launch page. The Double Dot app is not released yet and will ship with its own, separate privacy policy.

Who is responsible

This site is operated by the team behind Double Dot. For anything in this notice — a question, a request to see what we hold, or a request to delete it — write to hello@doubledot.site. That address reaches a person, and it is the fastest route to any of the rights described below.

What we collect

Three things, and nothing else.

• Your email address, if and only if you type it into the waitlist form and submit it. Nothing on this page collects an address any other way.
• Your approximate city and country, stored with your email address when you submit the form, and only then. When the page opens, it asks our own server, geo.doubledot.site, which city your IP address belongs to, so the waitlist card can name it. That server looks the address up in a database it holds, answers, and forgets it: the IP address is not logged or stored, and if you do not join, the city is not kept either. It is an estimate from your network, not your device's location — no permission is asked, and it is often a nearby city rather than yours.
• One page-view record per visit, and only if you choose Accept on the privacy choice. It contains the path you opened, the hostname of the site that linked you (not the full address), a device class — phone, tablet or laptop — and the width of your browser window.

The page-view record carries no cookie, no IP address and no visitor identifier. That is a deliberate limit rather than an omission: it means we can report how many times a page was opened, and we cannot report how many people opened it, or tell one visit from another. We accept the weaker number.

The page asks before it sends that record. Choose Decline and nothing is sent; choose Accept and one record goes per visit. Your answer is saved in your browser's local storage, as a single entry named dd-consent, so the page does not ask again. That entry holds only the word "accepted" or "declined", never leaves your device, and you can change it at any time with Privacy choices at the bottom of the home page.

What we do not collect

• No cookies of any kind. The only thing the page keeps in your browser is your answer to the privacy choice.
• No advertising or analytics trackers, and no third-party pixels.
• No precise location, no GPS, no contacts, no profile data — none of that exists until the app does.

Why we are allowed to hold it

• Your email address and city: your consent, given when you submit the form (GDPR Article 6(1)(a)). You can withdraw it at any time, and withdrawing is as easy as giving it: one email to us, or the unsubscribe link in anything we send.
• The city lookup when the page opens: our legitimate interest in telling you whether early access covers where you are (Article 6(1)(f)). Your IP address is used for that one answer and not kept, so nothing about you remains afterwards.
• The page-view count: your consent, given with Accept on the privacy choice (Article 6(1)(a)). Decline and no record is sent. You can withdraw it at any time with Privacy choices at the bottom of the home page.

Who else touches it

Three processors, each doing one job:

• InsForge — our own server at insforge.doubledot.site, which stores the waitlist and the view counts.
• Resend — sends the confirmation email and the launch email.
• Cloudflare — DNS and the network in front of the site. Cloudflare processes request metadata to route and protect traffic; we do not receive or store it.

Nothing else, and no third party at all. Every font, image and script on this site is served from this domain. Your browser is never asked to contact Google, a font host, an image host, a CDN or an analytics service, so none of them receive your IP address or learn that you were here. Until 9 September 2026 this page did load its typeface from Google Fonts; it no longer does, and the font now travels inside the page itself. The city lookup runs on our own server too: the database behind it comes from DB-IP (db-ip.com) under a Creative Commons licence, and DB-IP never receives your IP address. We do not sell your data to anyone, and there is nobody else in this list.

How long we keep it

Your email address, and the city stored with it, stay until the launch email has gone out and you have had a fair chance to unsubscribe, or until you ask us to remove it — whichever comes first. Then it is deleted, not archived. Page-view records are kept for twelve months and are aggregate from the moment they are written.

Your rights

If you are in the UK or the EU you have the right to see the data we hold about you, to correct it, to have it deleted, to object to how we use it, to restrict that use, and to receive a copy in a portable form. Write to hello@doubledot.site and we will answer within 30 days. In practice a deletion request on a waitlist takes a few minutes.

If you think we have handled your data badly, you can complain to your national supervisory authority. We would rather you told us first, but that right does not depend on it.

Age

Double Dot is for people aged 18 and over, and so is this waitlist. We do not knowingly hold data about anyone younger. If you believe we do, tell us and it will be deleted.

Changes

If this notice changes in a way that affects you, we will change the date at the top and — where the change is material and we still hold your address — say so by email before it takes effect.

← Back to Double Dot