Privacy

Last updated 21 September 2026. This notice covers doubledot.com, the launch page. The Double Dot app is not released yet and will ship with its own, separate privacy policy.

Who is responsible

This site is operated by the team behind Double Dot, who decide what is collected here and why — in the language of the GDPR, we are the data controller for everything described in this notice. Double Dot is not yet incorporated as a company. When it is, the registered name and address will be published in this section and the date at the top will change; we would rather say that plainly than print a name that does not exist.

For anything in this notice — a question, a request to see what we hold, to correct it, or to delete it — write to hello@doubledot.com. That address reaches a person, and it is the fastest route to any of the rights described below. If you would rather report a security problem than a privacy one, /.well-known/security.txt is the route for that.

What we collect

What is listed here, and nothing else.

• Your email address, if and only if you type it into the waitlist form and submit it. Nothing on this page collects an address any other way.
• Your approximate city and country, stored with your email address when you submit the form, and only then. When the page opens, it asks our own server, geo.doubledot.site, which city your IP address belongs to, so the waitlist card can name it. That server looks the address up in a database it holds, answers, and forgets it: the IP address is not logged or stored, and if you do not join, the city is not kept either. It is an estimate from your network, not your device's location — no permission is asked, and it is often a nearby city rather than yours.
• Where the link you followed was posted, stored with your email address when you submit the form, and only then — and only if the link carried a label. When we share this page in a post or a message we sometimes add a short tag to the address, such as ?utm_source=instagram, so we can tell which announcement reached people. If yours had one, we keep that single word with your address. It describes where the link appeared, not you, and the page does not save it in your browser.
• A spam check, run by Google, only when you use the waitlist form. When you first click or type in the email field, the page loads Google reCAPTCHA v3. It runs in the background — there is no puzzle to solve — and when you submit, it gives our server a score for how likely the request is to come from a person. Our server checks that score with Google and keeps nothing from it: no score, no token, and your IP address is not passed on by us. Google does receive your IP address and information about your browser from the reCAPTCHA script itself, and may set a cookie on its own domain, under Google's Privacy Policy and Terms of Service. If you only read the page and never use the form, reCAPTCHA is never loaded.
• One page-view record per visit, and only if you choose Accept on the privacy choice. It contains the path you opened, the hostname of the site that linked you (not the full address), a device class — phone, tablet or laptop — and the width of your browser window.
• One more record of the same four fields, if you join the waitlist and you chose Accept. It marks that a sign-up happened, so we can tell what share of visits become sign-ups. It holds no email address and no identifier, so it cannot be matched to the address you submitted, or to you.

Both records carry no cookie, no IP address and no visitor identifier. That is a deliberate limit rather than an omission: it means we can report how many times a page was opened, and we cannot report how many people opened it, or tell one visit from another. We accept the weaker number.

The page asks before it sends that record. Choose Decline and nothing is sent; choose Accept and one record goes per visit, plus the sign-up record above if you join. Your answer is saved in your browser's local storage, as a single entry named dd-consent, so the page does not ask again. That entry holds only the word "accepted" or "declined", never leaves your device, and you can change it at any time with Privacy choices at the bottom of the home page.

What we do not collect

• No cookies of our own. The only thing this site keeps in your browser is your answer to the privacy choice. The one exception is not ours: if you use the waitlist form, Google reCAPTCHA may set a cookie on Google's domain, as described above.
• No advertising or analytics trackers, and no third-party pixels.
• No precise location, no GPS, no contacts, no profile data — none of that exists until the app does.

Why we are allowed to hold it

• Your email address and city: your consent, given when you submit the form (GDPR Article 6(1)(a)). You can withdraw it at any time, and withdrawing is as easy as giving it: one email to us, or the unsubscribe link in anything we send.
• The city lookup when the page opens: our legitimate interest in telling you whether early access covers where you are (Article 6(1)(f)). Your IP address is used for that one answer and not kept, so nothing about you remains afterwards.
• The reCAPTCHA spam check: our legitimate interest in keeping the waitlist free of addresses that scripts submit, so that nobody receives a confirmation email for a sign-up they never made (Article 6(1)(f)). It runs only when you use the form.
• The page-view count: your consent, given with Accept on the privacy choice (Article 6(1)(a)). Decline and no record is sent. You can withdraw it at any time with Privacy choices at the bottom of the home page.

Who else touches it

Four services, each doing one job:

• InsForge — our own server at insforge.doubledot.site, which stores the waitlist and the view counts.
• Resend — sends the confirmation email and the launch email.
• Google reCAPTCHA — the spam check on the waitlist form, and only there. It loads only when you start to use the form.
• Cloudflare — DNS and the network in front of the site. Cloudflare processes request metadata to route and protect traffic; we do not receive or store it.

Nothing else. Every font and image on this site, and every script except reCAPTCHA, is served from this domain. Reading the page never asks your browser to contact Google, a font host, an image host, a CDN or an analytics service, so none of them receive your IP address or learn that you were here. The only moment your browser contacts Google is when you start to use the waitlist form, for the spam check above. Until 9 September 2026 this page did load its typeface from Google Fonts; it no longer does, and the font now travels inside the page itself. The city lookup runs on our own server too: the database behind it comes from DB-IP (db-ip.com) under a Creative Commons licence, and DB-IP never receives your IP address. We do not sell your data to anyone, and there is nobody else in this list.

How long we keep it

Your email address, and the city stored with it, stay until the launch email has gone out and you have had a fair chance to unsubscribe, or until you ask us to remove it — whichever comes first. Then it is deleted, not archived. Page-view records are kept for twelve months and are aggregate from the moment they are written.

Your rights

If you are in the UK or the EU you have the right to see the data we hold about you, to correct it, to have it deleted, to object to how we use it, to restrict that use, and to receive a copy in a portable form. Write to hello@doubledot.com and we will answer within 30 days. In practice a deletion request on a waitlist takes a few minutes.

If you think we have handled your data badly, you can complain to your national supervisory authority. We would rather you told us first, but that right does not depend on it.

If you are in California

California law gives you the same practical rights as the section above, under different names, and asks us to be specific about what we hold. In the twelve months to the date at the top of this page, the only personal information this site has collected is:

• Identifiers — your email address, and only if you submit the waitlist form.
• Geolocation data — an approximate city and country, matched from your IP address by our own server. It is coarse and often names a nearby city rather than yours. It is stored only if you join; the IP address itself is never stored.
• Internet or network activity — the path you opened, the hostname that linked you, a device class and your browser window width, and only if you chose Accept on the privacy choice. Separately, if you join the waitlist through a link that carried a campaign tag, the one-word tag saying where that link was posted. If you use the waitlist form, Google reCAPTCHA collects browser and network information for its spam check; we do not keep the result.

All three come from you, or from your use of this page. We collect them to answer the waitlist — to email you once when the app is live — and to understand where to open first and how the page performs. We keep them for the periods set out under "How long we keep it".

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done either in the past twelve months, and there is no advertising network, pixel or data broker anywhere on this site. We collect no sensitive personal information, so there is nothing for you to limit the use of.

You have the right to know what we have collected, to receive a copy of it, to have it corrected, and to have it deleted. You may use an authorised agent. We will not treat you differently for exercising any of these — there is no paid tier here, and no feature to withhold. Write to hello@doubledot.com and we will answer within 45 days, which in practice on a waitlist means the same week.

Age

Double Dot is for people aged 18 and over, and so is this waitlist. We do not knowingly hold data about anyone younger. If you believe we do, tell us and it will be deleted.

Changes

If this notice changes in a way that affects you, we will change the date at the top and — where the change is material and we still hold your address — say so by email before it takes effect.

← Back to Double Dot