Privacy.
Last updated: 10 October 2026
This policy explains what personal information recroll.app collects, why, who it’s shared with, how long it’s kept and what you can do about it. It covers the recroll.app website and the RecRoll waitlist. The RecRoll app will have its own privacy policy when it launches.
We’ve tried to write this in plain English. If anything is unclear, email hello@recroll.app.
1. Who we are
recroll.app and RecRoll are run by RecRoll, based in the United Kingdom (“RecRoll”, “we”, “us”).
We decide how and why your personal information is used, which makes us the controller of it under UK data protection law (the UK GDPR and the Data Protection Act 2018) and, where they apply to you, the EU GDPR and other privacy laws.
Contact for anything about your privacy: hello@recroll.app
2. The short version
- If you join the waitlist, we keep your email address and use it to email you about RecRoll. You can unsubscribe at any time.
- We use DataFast to count visitors and see how people find the site, and the Meta Pixel to measure our adverts on Facebook and Instagram. Both use cookies.
- If you’re in the UK, the EU/EEA, Switzerland, Quebec or Brazil, neither of those loads until you click Accept on our cookie banner.
- Everywhere else, they load by default, and you can switch them off at any time with Your privacy choices at the bottom of every page.
- We never sell your email address, and we never give it to DataFast or Meta.
3. What we collect, why, and our legal basis
3.1 Your email address, if you join the waitlist
What: the email address you enter, and the date and time you joined.
Why: to add you to the RecRoll waitlist and email you about RecRoll. That includes a confirmation when you join, news about the app’s progress and features, early access, the launch, and offers such as the founding-member deal.
Legal basis: your consent, which you give by entering your email and joining. You can withdraw it at any time with the unsubscribe link in every email, or by emailing hello@recroll.app. Withdrawing consent doesn’t affect emails we sent before you withdrew it.
Email engagement: our emails may contain standard tracking that tells us whether an email was opened and which links were clicked. We use this to judge which emails are useful. It’s covered by the same consent, and unsubscribing stops it.
Joining the waitlist is optional. If you don’t give us an email address, you can still use the website.
3.2 Visitor statistics (DataFast)
What: the pages you view, the site you came from, campaign tags in the link you followed (for example utm_source), your browser, device type and operating system, your approximate location (country and city, worked out from your IP address), your IP address, and whether you joined the waitlist. DataFast uses four cookies to tell visits apart (section 5).
When you join the waitlist, we record a “joined waitlist” event in DataFast so we can see which sources bring sign-ups. Your email address is never sent to DataFast.
Why: to understand how many people visit, how they find us, and which articles and sources lead to sign-ups.
Legal basis:
- UK, EU/EEA, Switzerland, Quebec and Brazil: your consent, given by clicking Accept on the cookie banner. Nothing loads until you do.
- Everywhere else: our legitimate interests in understanding and improving our website. You can object at any time with Your privacy choices.
3.3 Advertising measurement (Meta Pixel)
What: the Meta Pixel is a small piece of code from Meta Platforms (the company behind Facebook and Instagram). When it loads, it tells Meta which pages you viewed, the address of the page, your browser and device details, your IP address, and events such as “joined the waitlist”. It uses cookies (section 5), and if you’re logged into Facebook or Instagram in the same browser, Meta may link this information to your Meta account. We never send your email address to Meta.
Why: to measure whether our adverts on Facebook and Instagram bring people to the site and onto the waitlist, and to show our adverts to people who’ve visited the site (and to people similar to them).
Legal basis:
- UK, EU/EEA, Switzerland, Quebec and Brazil: your consent, given by clicking Accept on the cookie banner.
- Everywhere else: our legitimate interests in measuring and improving our advertising. You can opt out at any time with Your privacy choices.
Meta’s role: for collecting this information through the Pixel and sending it to Meta, Meta and we are joint controllers. Meta is responsible for what it does with the information after it receives it, under its own privacy policy: https://www.facebook.com/privacy/policy. You can also control the adverts Meta shows you in your Facebook or Instagram ad settings.
3.4 Your cookie choice
What: whether you clicked Accept or Reject, stored in your own browser (section 5).
Why: so we remember your choice and don’t ask on every page.
Legal basis: our legitimate interests in respecting your choice. This storage is strictly necessary, so it doesn’t need consent.
3.5 Technical information when you visit (hosting)
What: like every website, our host receives your IP address, browser details, the page requested and the time, in order to deliver the page to you.
Why: to show you the website, keep it secure and working, and investigate faults or attacks.
Legal basis: our legitimate interests in running a secure website.
3.6 Emails you send us
What: your email address, name if you include it, and whatever you write.
Why: to reply to you and keep a record of the conversation.
Legal basis: our legitimate interests in answering messages, or, if you’re asking us to act on your privacy rights, our legal obligation to do so.
What we don’t do
- We don’t sell your personal information, and we don’t share it with anyone for money.
- We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.
- We don’t knowingly collect information about children (section 10).
- We don’t ask for sensitive information, such as health, beliefs or ethnicity. Please don’t include any in emails to us.
4. Who we share it with
We only share personal information with the service providers that run the site and the waitlist for us, and only as far as each one needs it.
| Provider | What they do for us | Where they are |
|---|---|---|
| Loops (Astrodon Corporation) | Holds the waitlist and sends our emails | United States |
| DataFast (JustShipIt Pte. Ltd.) | Visitor statistics | Company in Singapore; data stored mainly in the United States |
| Meta Platforms (Meta Platforms Ireland Ltd for the UK, EU/EEA and Switzerland; Meta Platforms, Inc. elsewhere) | Advertising measurement, as a joint controller (section 3.3) | Ireland and United States |
| Vercel (Vercel Inc.) | Hosts the website | United States, with servers worldwide |
Loops, DataFast and Vercel act as our processors: they may only use your information on our instructions and under data processing terms with us. Each of them uses its own sub-processors (for example, cloud hosting providers) under the same kinds of terms.
We may also disclose personal information:
- if the law requires it, or to respond to a valid request from a court, regulator or the police;
- to protect our rights, our users or the public, for example to stop fraud or abuse;
- to a buyer or successor if RecRoll is transferred to a company we set up or sold. If that happens, this policy keeps applying to your information, and we’ll tell you if anything changes.
5. Cookies and similar technology
| Name | Set by | Purpose | How long it lasts | Type |
|---|---|---|---|---|
recroll-consent |
recroll.app (stored in your browser, not a cookie) | Remembers whether you accepted or rejected cookies | Until you clear your browser storage | Strictly necessary |
datafast_visitor_id |
DataFast, on recroll.app | Tells visits by the same browser apart | 12 months | Analytics |
datafast_session_id |
DataFast, on recroll.app | Groups page views into a single visit | 30 minutes | Analytics |
datafast_visitor_first_seen_at |
DataFast, on recroll.app | Records when this browser first visited, to tell new visitors from returning ones | 12 months | Analytics |
datafast_visitor_session_count |
DataFast, on recroll.app | Counts how many visits this browser has made | 12 months | Analytics |
_fbp |
Meta, on recroll.app | Identifies your browser to Meta for advertising measurement | 90 days | Advertising |
Meta’s own cookies (for example fr) |
Meta, on facebook.com | Advertising measurement and targeting, if you use Facebook or Instagram in the same browser | Up to 90 days, under Meta’s cookie policy | Advertising |
Changing your mind. Select Your privacy choices at the bottom of any page. If you reject, we stop loading DataFast and the Meta Pixel, delete the DataFast and _fbp cookies we’re able to delete, and reload the page. Meta’s own cookies on facebook.com can only be removed in your browser or through Meta.
Browser controls. You can also block or delete cookies in your browser settings. If you clear all site data, your choice is forgotten too, and the banner will show again if it applies to you.
Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as an opt-out: DataFast and the Meta Pixel don’t load.
6. International transfers
We’re based in the UK, and our providers store and process information in the United States and elsewhere. When your information leaves the UK or the EU/EEA, it’s protected in one of these ways:
- the provider is certified under the EU–U.S. Data Privacy Framework and its UK Extension (Loops, Meta and Vercel are); or
- the provider has agreed to the Standard Contractual Clauses approved by the European Commission, with the UK Addendum for UK data (DataFast’s data processing terms rely on these).
You can ask us for more details of these safeguards at hello@recroll.app.
7. How long we keep it
| Information | How long |
|---|---|
| Waitlist email address | Until you unsubscribe or ask us to delete it. If RecRoll doesn’t launch, we’ll delete the waitlist within 12 months of deciding not to go ahead. |
| Unsubscribed email addresses | Kept on a “do not email” list for as long as we send emails, so we can make sure you’re never emailed again. Ask us to delete it completely and we will, but we then can’t guarantee you won’t be re-added if someone types your address in again. |
| Email open and click records | For as long as your address is on the waitlist |
| DataFast visitor statistics | For as long as we use DataFast, so we can compare visitor numbers over time; deleted when we close our DataFast account |
| Meta Pixel information | Kept by Meta under its own policies |
| Hosting logs | A short period, under Vercel’s standard retention settings |
| Emails with us | Up to 2 years after our last message, unless we need them longer for a legal claim |
8. Your rights
Everyone
Wherever you live, you can:
- ask what personal information we hold about you and get a copy;
- ask us to correct it;
- ask us to delete it;
- unsubscribe from our emails at any time;
- opt out of analytics and advertising cookies with Your privacy choices.
Email hello@recroll.app with your request. We’ll answer within one month (we may extend that by up to two more months for complicated requests, and we’ll tell you if we do). We may ask you to confirm your identity first, for example by replying from the email address on the waitlist. Requests are free unless they are clearly unfounded or excessive.
UK, EU/EEA and Switzerland
You also have the right to:
- object to us using your information on the basis of legitimate interests, and to object to direct marketing at any time;
- restrict how we use your information;
- data portability: receive the information you gave us in a common format;
- withdraw consent at any time, without affecting what we did before you withdrew it;
- complain to a regulator. In the UK, that’s the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). In the EU/EEA, it’s the data protection authority in the country where you live or work. We’d be grateful for the chance to sort out your concern first, so please contact us before going to a regulator.
United States
We don’t sell personal information for money. Some US state laws treat letting Meta collect information through the Pixel for advertising as “selling” or “sharing” personal information, or as “targeted advertising”. You can opt out of this at any time with Your privacy choices, and we honour Global Privacy Control signals as an opt-out. Depending on your state, you may also have the rights listed under “Everyone” above. If we refuse a request, you can appeal by replying to our answer, and we’ll respond to your appeal within the time your state’s law requires. We won’t treat you differently for using any of your privacy rights.
Quebec
The person in charge of protecting personal information at RecRoll can be contacted at hello@recroll.app. You may also complain to the Commission d’accès à l’information du Québec.
Brazil
You have the rights set out in Article 18 of the LGPD, including confirming whether we process your data, access, correction, anonymisation or deletion, portability, information about who we share it with, and withdrawing consent. Contact us at hello@recroll.app, which is also our channel for the Brazilian data protection authority (ANPD). You may also complain to the ANPD.
9. Security
We keep personal information to a minimum and protect what we hold. The website runs only over secure (HTTPS) connections and has no user accounts or database of its own. Access to our accounts with the providers above is restricted to us. No method of sending or storing information online is completely secure, but if a breach affecting your information ever happens, we’ll tell you and the regulator where the law requires us to.
10. Children
The website and the waitlist are not for children. You must be at least 16 to join the waitlist. If you believe a child has given us their email address, contact hello@recroll.app and we’ll delete it.
11. Links to other sites
Our articles may link to other websites. We’re not responsible for how those sites handle your information. Check their privacy policies.
12. Changes to this policy
We’ll update this policy when what we do changes, for example when the RecRoll app launches or we start using a new provider. The date at the top shows when it last changed. If a change materially affects how we use your waitlist email address, we’ll email you about it before it takes effect.
13. Contact
RecRoll Email: hello@recroll.app