Privacy notice

atttic is a paprhouse product, made by Rivvar Limited, a company registered in England and Wales (company number 16808280). Registered office: 41 High Street, Leicester, LE8 0HS, United Kingdom.

Rivvar Limited is responsible for your data (the “data controller”).

Contact us about your data at pp@paprhouse.com.

• Your email address.
• When you signed up and confirmed, and which version of the sign-up wording you saw, so we can show you agreed.
• If you agree to join a group, such as beta testing, a label saying so.
• A record of which of our emails were sent to your address. It stops being linked to you when you unsubscribe.
• Standard server logs kept by our hosting provider, which include your IP address and browser details. To limit repeated sign-up attempts and suggestions, we also keep a scrambled (hashed) form of your IP address for 10 minutes. It can’t be turned back into your IP address, and it’s never stored with your email address or your suggestion.

This site doesn’t use cookies, apart from a sign-in cookie for our own admin area. It doesn’t use analytics or tracking pixels, and our emails don’t track opens or clicks.

To email you about atttic. When you sign up we send one email asking you to confirm. Once you confirm, Luke sends a short welcome, then occasional updates as atttic takes shape, and an email when it launches. If you joined before 6 November 2026, you agreed only to the launch email, so that’s the only further email you’ll get. Every email has a one-click unsubscribe, and we never track opens or clicks.

Our lawful basis is your consent. You can withdraw it at any time by unsubscribing.

If you suggest a feature on the roadmap page, we store only the text you write and when you sent it: no name, email or IP address. Please don’t include personal details. We delete suggestions within 12 months.

• Supabase stores the waitlist, in the EU (Paris, France).
• Resend sends our emails, from the EU (Ireland).
• Upstash holds the short-lived, hashed rate-limit counters, in the EU (Ireland).
• Vercel hosts this website and keeps its server logs.

They process your data only on our instructions. We never sell or share your address with anyone else.

All four providers are headquartered in the United States. Supabase, Resend and Upstash store your data in the EU, as stated above, but the companies may still access it from outside the UK and EU, and Vercel may process it in the United States. Those transfers are covered by our data processing agreements with each provider, which use the EU Standard Contractual Clauses together with the UK International Data Transfer Addendum.

If you confirm your address, we keep it until 12 months after atttic launches, or until you unsubscribe, whichever comes first. If you don’t confirm it, we delete it after 14 days.

Under UK GDPR you can:

• ask for a copy of the data we hold about you;
• ask us to correct it or delete it;
• object to or restrict how we use it;
• withdraw your consent at any time.

Every email we send has an unsubscribe link, which deletes your address straight away. For anything else, email pp@paprhouse.com. We’ll reply within one month.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.