Until The Last Cat
Back to Home

Privacy Policy

Last updated: September 26, 2026

Who controls your data

Until the Last Cat is an independent game project operated by:

Apoema Berrokan

Privacy contact: hello@untilthelastcat.com

Apoema Berrokan is the data controller for the personal data described in this Privacy Policy.

What we collect

A. Waitlist Signups

When you sign up for the Until the Last Cat waitlist, we may collect and store the following information:

  • Email address
  • Preferred platform
  • Confirmation of consent
  • Source of the signup
  • Signup date and time
  • Internal database identifier

The waitlist application does not store IP addresses in the waitlist database or in its rate-limit records.

For automated abuse prevention and rate limiting, the signup service generates a temporary HMAC-SHA256 derived identifier from the normalized email address.

Rate Limiting Privacy Safeguards:

  • The raw email address is NOT stored in the rate-limit bucket.
  • Temporary rate-limit records expire automatically after approximately 10 minutes.

B. First-Party Website Analytics (Cookieless)

We collect minimal first-party analytics events to understand aggregate website performance and interaction trends. These events may record only:

  • Usage event type (e.g., page view, CTA interaction, video playback, feature selection)
  • Properties strictly associated with the specific event (such as platform preference or button location)
  • Campaign and traffic source parameters: utm_source, utm_medium, and utm_campaign
  • Referring website hostname (referrer_host, stored only as a domain/hostname, not a full URL)

First-Party Analytics Privacy Safeguards:

  • The analytics database does not store IP addresses.
  • The analytics schema does not include dedicated fields for email addresses or contact details.
  • No cookies, session IDs, user IDs, or persistent device fingerprints are used for first-party analytics.
  • Data is stored in our dedicated Supabase database located in the European Union (EU).

C. Google Analytics 4 (Consent-Based Third-Party Analytics)

Subject to your explicit opt-in consent, we use Google Analytics 4 (via gtag.js), provided by Google LLC / Google Ireland Limited ("Google"), to measure traffic sources and overall website performance.

Google Analytics 4 operates under Basic Consent Mode: the analytics scripts are NOT loaded and NO cookies are placed on your device unless and until you click "Accept" on our cookie banner. If you click "Decline", no connection to Google Analytics servers is initiated.

  • Cookies Used: _ga (distinguishes visitors on an aggregate basis) and _ga_<container-id> (maintains session state).
  • Information Collected: Browser type, approximate location (region/country level), operating system, referral URL / marketing campaigns, video engagement, cat showcase interactions, and waitlist start/completion events.
  • IP Anonymization: IP addresses are masked and not retained as personal identifiers by Google Analytics.
  • Zero Personal Identifiers: We do NOT pass email addresses, real names, or user IDs to Google Analytics. Waitlist conversions transmit exclusively the chosen gaming platform.

Why we collect it

We collect and process this data strictly for the following purposes:

Waitlist Operations:

  • To maintain the launch waitlist
  • To notify you about the official launch of Until the Last Cat
  • To send relevant project and game updates to users who explicitly consented
  • To prevent automated abuse and protect the signup endpoint

First-Party & Google Analytics Telemetry:

  • To understand aggregate usage and navigation trends on the landing page
  • To measure campaign acquisition performance across social channels (e.g. X, TikTok, YouTube, Instagram, Pinterest, and Google)
  • To identify which page features, previews, and cat profiles receive engagement
  • To measure waitlist conversion rates and optimize website speed and usability

We do not engage in behavioral advertising, and we do not sell or monetize your personal data or analytics records.

Legal basis

Waitlist and Communications:

Processing of waitlist data and sending project communications is based on your explicit consent provided at the time of signup (Article 6(1)(a) GDPR).

You have the right to withdraw your consent at any time by sending an email to hello@untilthelastcat.com.

First-Party Cookieless Analytics:

Processing of minimal, first-party analytics data is based on our legitimate interests (Article 6(1)(f) GDPR) in understanding website performance and campaign effectiveness without placing cookies or tracking users across websites.

Google Analytics 4 (Cookies):

The use of third-party analytics cookies and Google Analytics 4 tracking is based strictly on your prior, freely given, informed consent (Article 6(1)(a) GDPR and Article 22.2 of the Spanish Information Society Services Act — LSSI-CE). You may grant, refuse, or withdraw this consent at any time. Waitlist subscription is completely independent of analytics consent.

How long we keep the data

Waitlist Data:

Waitlist signup data is kept until 12 months after the public launch of Until the Last Cat, or until the user asks for deletion, whichever happens first.

First-Party Analytics Events:

First-party analytics events follow a 90-day retention policy. Records older than 90 days are deleted opportunistically when the analytics ingestion mechanism processes a new event.

Google Analytics 4 Data:

Event data retention in Google Analytics 4 is set to 14 months, after which individual event identifiers expire and only aggregated statistics remain.

Temporary rate-limit records expire after approximately 10 minutes.

Service providers

We rely on trusted third-party infrastructure providers to operate the website:

Supabase

Supabase provides managed database infrastructure used to store waitlist signups, execute server-side rate limiting, and record first-party analytics events. The Supabase project is hosted in a European region (EU).

Hostinger Email

Hostinger provides email infrastructure used to deliver transactional waitlist confirmations and official project communications to subscribed users.

Google LLC / Google Ireland Limited

Provides Google Analytics 4 when explicitly authorized by the user. Data transfers are protected by standard contractual clauses and adequacy frameworks.

Your rights & Cookie Preferences

Depending on applicable data protection laws, you may have the right to request:

  • Access to the personal data we hold about you
  • Correction of inaccurate or incomplete data
  • Deletion of your personal data
  • Restriction of processing of your personal data
  • Data portability where applicable
  • Withdrawal of your waitlist consent or cookie consent at any time

Manage Your Analytics Cookie Choice:

You can review, modify, or immediately revoke your Google Analytics cookie consent at any moment using our cookie settings dialog:

To exercise any other rights regarding waitlist personal data, please contact us at: hello@untilthelastcat.com

You also have the right to lodge a complaint with a competent supervisory authority (such as the Agencia Española de Protección de Datos — AEPD) if you believe your data has been handled improperly.

Data sharing

We treat your data with utmost care. Waitlist and analytics data:

  • Are not sold
  • Are not rented
  • Are not shared for behavioral advertising or third-party marketing

Your data is only processed by necessary service providers (such as Supabase, Hostinger, and Google when consent is granted) required to operate the infrastructure described in this policy.

Security

We implement reasonable technical and organizational measures to safeguard your personal data against unauthorized access, loss, or misuse. However, no transmission over the Internet or electronic storage method is completely without risk, and absolute security cannot be guaranteed.

Changes to this policy

We may update this Privacy Policy from time to time, including in scenarios where:

  • Waitlist functionality or project features change
  • New service providers or processors are added
  • Analytics or tracking tools are updated
  • Legal or regulatory requirements change

Any updates will be reflected on this page with a revised "Last updated" date.

Back to Until the Last Cat