Privacy Policy

1Who is responsible

The controller of the personal data described in this policy is Apps I Think, which operates appsithink.com.

The contact for any question about this policy, and for any request about your data, is support@appsithink.com. A person reads it. We will give our registered postal address for service on request to the same address.

Apps I Think also operates inaff and commentrs. Each has its own privacy policy covering its own processing, and this document does not describe either of them. inaff's is at inaff.app/privacy. commentrs' is at commentrs.com/privacy.

2The short version

Reading this site: the host records a server log entry, which includes your IP address. We do not read those logs routinely and nothing on this site links a log entry to a person.

There are no cookies. There is no analytics. There are no third party scripts, tags, pixels or embeds. The home page runs one script of our own, which asks you to accept these documents and stores your answer in your browser, never on our side.

Fonts are served from this site rather than from a font provider, so no third party learns that you read this page.

Writing to us: we keep your email, because an email is a message from somebody and we have to be able to answer it.

That is the entire list.

3The server log

appsithink.com is hosted by Netlify, which records standard web server logs when a page is requested. A log entry contains the IP address of the request, the time, the page requested, the referring page if the browser sent one, and the browser's user agent string.

This is a necessary part of serving a web page and of keeping the service available and secure. We rely on our legitimate interest in operating and protecting the site, under Article 6(1)(f) of the UK and EU GDPR.

We do not use these logs to build a profile, we do not combine them with anything else, and we do not sell or share them. Retention is Netlify's standard log retention and we do not keep a separate copy.

There is no way for us to identify you from a log entry, and no attempt is made to.

4Cookies, and the one thing stored in your browser

This site sets no cookies of any kind. Not analytics cookies, not preference cookies, not strictly necessary ones.

When you accept these documents on the card that opens on your first visit, the home page writes one entry to your browser's local storage, ait-legal-accepted, holding the version you accepted and the time. It stays in your browser and is never sent to us, so we do not hold a record of who accepted. It exists so that you are not asked again on every visit. The Cookie policy describes it in full, and clearing this site's data removes it.

Your browser may store this page in its own cache. That is your browser's behaviour and nothing is sent to us by it.

5Email you send us

If you write to partnerships@appsithink.com or support@appsithink.com, we hold your message, your email address, your name if you give it, and anything else you choose to put in it.

For a commercial enquiry we rely on our legitimate interest in responding to a business approach, and on the steps necessary to enter into a contract if it goes that way.

For a legal matter, including a request about your data or a notice served on the company, we rely on our legal obligation to respond and on the establishment, exercise or defence of legal claims.

Commercial correspondence is kept while the conversation is live and for up to 24 months after the last message, so that a conversation which restarts has its history. Legal correspondence is kept for as long as the matter is live and then for six years, which is the ordinary limitation period for a contract claim.

Please do not send us special category data, meaning information about health, beliefs, sexuality, politics or biometrics, unless it is genuinely necessary for the matter you are writing about. A company contact address is not the right place for it and we cannot control what has already arrived.

6Which addresses we publish

This company publishes two addresses, partnerships@appsithink.com and support@appsithink.com. We also accept mail at postmaster@ and abuse@, which mail standards expect every domain to accept, and at internal addresses that our payment and app store providers write to. Those internal addresses are not published and nobody should need to use them.

Anything sent to another address at this domain is rejected during the SMTP transaction, so your own mail provider tells you immediately and generates the bounce. We do not accept and silently discard, because that would let you believe a message had arrived when it had not, and we do not send an automatic reply, because replying to an address that may have been forged is how a domain becomes a spam problem for somebody else.

The practical consequence for you: if you mistype one of our addresses, you will find out within seconds rather than never.

7Who else sees any of this

Netlify, as the host of this site, processes the server logs described in section 3.

Our email provider processes messages you send to the addresses in section 5, in the same way that any email provider handles mail.

Professional advisers, such as lawyers or accountants, where a matter requires it.

A public authority where we are legally required to disclose something. We do not treat a request as valid simply because it arrives.

Nobody else. We do not sell personal data, we do not share it for advertising, and there is no advertising on this site to share it with.

8International transfers

Our host and our email provider operate globally, so data described in this policy may be processed outside the country you live in, including in the United States.

Where personal data is transferred out of the United Kingdom or the European Economic Area, it is done under the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses, or to a country covered by an adequacy decision.

9Your rights

Depending on where you live, you have some or all of the following rights: to know what we hold about you, to get a copy of it, to have it corrected, to have it deleted, to restrict or object to how we use it, to receive it in a portable form, and to complain to a regulator.

To exercise any of them, write to support@appsithink.com. We will answer within one month. If a request is genuinely complex we may take longer and will tell you why within that first month.

We will not charge you for a request, and we will not refuse one because we would rather not receive it. A request about your data is never treated as misuse of a contact address, whatever else is happening between us.

If you are unhappy with our answer you may complain to the data protection authority where you live. In the United Kingdom that is the Information Commissioner's Office. In the European Union it is the supervisory authority of your member state.

Realistically, what we hold about a reader of this site is a server log entry that we cannot connect to you, and, if you have written to us, your email. A request will usually be answered by us describing exactly that.

10Children

This site is a company page and is not directed at children. It has no accounts and collects nothing from a reader beyond the server log in section 3.

The products do have age rules, and they are enforced inside the products: inaff is 18+ and commentrs is 13+.

11Security

The site is served over HTTPS only. It sends a content security policy that allows exactly one script, the entry card on the home page, and nothing inline, forbids framing, and restricts every other resource to this origin, which closes the categories of attack that rely on injecting or embedding something.

Email is protected by our provider's ordinary transport security. Email is not an end to end encrypted medium and nobody should treat it as one. If you have something genuinely sensitive to send, say so first and we will agree a route for it.

12Changes to this policy

If this changes, the version number and effective date at the top change with it, and the revised document replaces this one at this address.

There is no account here, so there is nobody for us to notify. If a change is material and you have an open matter with us, we will mention it in that correspondence.

13Contact

Anything in this policy, and any request about your data: support@appsithink.com.

Commercial and press: partnerships@appsithink.com.

Privacy questions about inaff or commentrs belong with that product, because that is where the data is. inaff.app/privacy and commentrs.com/privacy each name their own contact.