Back to the waitlist

Waitlist privacy policy

In force from 30 November 2026.

This policy covers signing up on unikorn.gg/waitlist to hear when Unikorn launches in your language. The game itself, in Polish, has its own privacy policy.

Who is the controller

The controller is Adrian Kijewski, an entrepreneur trading as [NAZWA FIRMY Z CEIDG], address: [ULICA, KOD, MIEJSCOWOŚĆ], Poland, NIP (tax number) [NIP], REGON [REGON].

For anything about your data, email kontakt@unikorn.gg or write to the address above. We have not appointed a data protection officer, as we are not required to; you write to the controller directly. We reply within one month; in complex cases we may extend this by two months and will tell you why.

What we process and why

  • Email address, country, language of the sign-up and date of consent: to confirm your sign-up and to email you when Unikorn launches in your country, at most 3 emails. The legal basis is your consent (Article 6(1)(a) GDPR).
  • A hash of your IP address with a daily salt (SHA-256, without the address itself): to protect the list from mass sign-ups (at most 5 per hour from one network). The legal basis is our legitimate interest in preventing abuse (Article 6(1)(f) GDPR).
  • Cloudflare Turnstile checks, when you sign up, that a person is signing up. Cloudflare processes your IP address and technical data of your browser for this (Article 6(1)(f) GDPR).

Giving your email is voluntary, but you can’t join the list without it. We don’t profile you and make no automated decisions about you.

How long

  • We keep your address until 30 days after Unikorn launches in the language you signed up for, then delete it.
  • We delete IP hashes after 7 days.
  • Server logs (IP address, time, page and browser) are kept by Vercel for up to 1 day and by Supabase for up to 7 days; error reports in Sentry for 90 days.

Who receives the data

Service providers process the data for us under data processing agreements:

  • Supabase (Supabase Pte. Ltd., Singapore): the database, on servers in the EU, in Frankfurt.
  • Vercel (Vercel Inc., USA): the servers of the site in Frankfurt and the network delivering its pages worldwide.
  • Resend (Plus Five Five Inc., USA): sending the emails.
  • Cloudflare (Cloudflare Inc., USA): Turnstile and the encrypted backups.
  • PostHog (PostHog Inc., USA): counting visits, on servers in the EU, without cookies and without your email.
  • Sentry (Functional Software Inc., USA): error reports, in the EU data region.
  • GitHub (GitHub Inc., USA): the servers where the nightly copy of the database is made before it is encrypted; encrypted copies are kept in Cloudflare R2 for 30 days.
  • Proton (Proton AG, Switzerland): our mailbox, where messages to kontakt@ arrive.

Public authorities receive data when the law requires it.

Transfers outside the European Economic Area

Some providers are based or have servers outside the EEA: in the USA (Vercel, Resend, Cloudflare, PostHog, Sentry and GitHub), in Singapore (Supabase, when its team supports the project; the data itself stays in the EU) and in Switzerland (Proton). Transfers rely on:

  • the European Commission’s decision on the adequate protection of personal data in Switzerland;
  • the European Commission’s decision of 10 July 2023 on the EU–US Data Privacy Framework, where the US company has joined it;
  • the standard contractual clauses adopted by the European Commission (decision 2021/914), which are part of our agreements with providers in the USA and Singapore.

We will send you a copy of these safeguards on request to kontakt@unikorn.gg.

No cookies

The site sets no cookies and no advertising identifiers, and keeps on your device only what the page needs to work. We count visits with PostHog (EU) without cookies, without storing anything on your device and without your email.

Your rights

You have the right to access your data and get a copy of it, to have it corrected or erased, to restrict its processing, to data portability, and to object to the processing of the IP hash and of the Turnstile check. You can withdraw your consent at any time, with the unsubscribe link in every email or by writing to kontakt@unikorn.gg; withdrawal doesn’t affect the processing before it.

You can also complain to a data protection authority, in Poland the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or to the authority of the country where you live or work.

Changes

We publish a new version of this policy on this page with the date it comes into force. If the change matters for you, we will email you before it comes into force.

Back to the waitlist