Draft — pending legal review. This text is a working draft and is not yet final.
Privacy policy
Last updated 9 October 2026
Who we are
Holotown is operated by a company registered in the United Arab Emirates (Dubai DED trade license 136677). We are the controller of the personal data described here. Contact us at hello@holotown.app.
This policy covers this website and the waitlist. The Holotown app is not released yet; it will have its own privacy policy before beta.
What we collect
- Waitlist sign-ups: your email address, whether you told us you are a collector or a card shop, and the country your request came from (derived from your IP address by our hosting provider). We do not store your IP address in the waitlist.
- Server logs: our hosting provider keeps short-lived technical logs (such as IP address, browser type and the page requested) to run and protect the service.
This website does not use advertising or analytics cookies and does not track you across other sites.
Why we use it
- To send you a launch email and, if you are a shop, to invite you to early access. Legal basis: your consent, which you can withdraw at any time.
- To understand roughly where interest comes from (country counts) so we can plan launch regions. Legal basis: our legitimate interest.
- To keep the website secure and stop abuse, such as automated sign-ups. Legal basis: our legitimate interest.
Who we share it with
We do not sell or rent your personal data. We use service providers who process it for us under contract:
- Vercel Inc. (website hosting), United States.
- Supabase Inc. (database hosting), with data stored in the United States.
Your data may therefore be transferred outside your country, including outside the UAE, UK and EEA. Where required, we rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
We keep waitlist entries until 12 months after the app launches, or until you ask us to delete yours, whichever comes first.
Your rights
Depending on where you live (for example under the UAE Personal Data Protection Law, the EU or UK GDPR, or the California CCPA), you can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent. Email hello@holotown.app from the address you signed up with and we will reply within 30 days. You can also complain to your local data protection authority.
Children
The waitlist is not intended for children under 13 (or the minimum age in your country). If you believe a child has signed up, contact us and we will delete the entry.
Changes
If we change this policy we will update the date above, and for significant changes we will tell people on the waitlist by email.