Privacy Policy

Last updated: October 22, 2026

This Privacy Policy explains how Spacerun, Inc (“Spacerun”, “we”, “us”) handles personal information through spacerun.app, its landing pages, waitlist, support correspondence, and download links.

1. Who is responsible for your information

Spacerun, Inc is registered in Delaware, USA, with registration number 10689627. Our business address is ____.

We are responsible for deciding how personal information is used for the purposes described here. Contact us about privacy, removal from the waitlist, or your rights at support@spacerun.app.

This policy covers the landing website and waitlist. Account features, cloud gaming, subscriptions, and installed applications may involve additional processing described in the notices provided with those services. This policy does not describe third-party websites you choose to visit.

2. Information we collect

• Information you submit: your email address when you join the waitlist, a name if you provide one in a signup request, and information you include in support messages.
• Signup context: a referral code and the campaign source, medium, and campaign name included in your signup link, when present. These help us understand where signups come from.
• Approximate location: country and city information supplied by our network infrastructure from your connection, when available. The waitlist does not request GPS or precise device location.
• Connection and security information: your IP address, request and error information, and the browser and connection signals involved in bot protection. See Cloudflare Turnstile.
• Browser preferences: a record that you dismissed an announcement, if you do so. See Cookies and browser storage.

We store waitlist details in our invitation and account system so we can send invitations and recognise repeat signups. Joining the waitlist does not itself complete account registration or purchase a subscription.

Providing an email address and passing the security check are necessary to submit the waitlist form. You can browse the public pages without joining. Do not send passwords, payment card details, or sensitive personal information through the waitlist or ordinary support email.

3. How we use information

We use personal information to:

• Register your interest, send the invitation you request, and communicate about waitlist access and launch availability.
• Respond to questions and requests, including requests to leave the waitlist.
• Understand referral and campaign sources and the regions where people request access.
• Operate the website, investigate errors, limit excessive requests, and prevent bots, spam, fraud, and abuse.
• Meet legal obligations, handle disputes, and protect legal rights.

Joining the waitlist requests communications about your signup and access to Spacerun. It does not authorise unrelated advertising. You can ask us to stop waitlist updates or remove your signup by emailing support@spacerun.app.

Where EU or UK data protection law applies, our bases for processing are:

• Your request for a service or steps before a contract: handling your signup, invitation, and related support.
• Legitimate interests: maintaining a secure, reliable website; preventing abuse; understanding signup sources and regional demand; and handling legal claims. We consider these interests alongside your rights.
• Consent: optional marketing or optional tracking where consent is required. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.
• Legal obligations: responding to requirements that apply to us.

Turnstile and rate limits can automatically reject a signup attempt that fails security checks. If you think a legitimate request was blocked, contact support. We do not use the landing site to make automated decisions with legal or similarly significant effects about you.

4. Who receives information

We share information as needed with providers of hosting, network security, authentication and database infrastructure, email delivery, and support. Our waitlist uses Supabase-compatible authentication infrastructure to store invitation details and send invitation emails. The infrastructure may be operated by us or by our hosting providers.

Cloudflare, Inc provides Turnstile verification. Its processing is explained in the Cloudflare Turnstile section below, which links to Cloudflare’s own notices.

We may disclose information to professional advisers, authorities, or other recipients when required by law or reasonably necessary to investigate abuse, protect rights, or handle a legal claim. If our business is acquired or reorganised, relevant information may be transferred subject to applicable privacy obligations.

We do not sell personal information or share it for cross-context behavioural advertising. The landing site does not currently include advertising pixels or separate audience analytics scripts.

5. Downloads and external links

Download buttons may take you to ReleaseDesk or Apple’s TestFlight. Social links take you to the relevant social platform. When you follow a link, that provider receives connection information from your browser and handles it under its own privacy notice. We do not send your waitlist email to a download or social platform merely because you follow a link.

6. Cookies and browser storage

When you dismiss a website announcement, the site saves a small preference in your browser’s local storage so it can keep that announcement hidden on later visits. The entry is named dismissed: followed by the announcement identifier and contains the value 1.

This preference is stored on your device. It has no automatic expiry in the website code and remains until you clear site data or your browser removes it. Clearing it makes the announcement eligible to appear again. It is not an advertising identifier.

Turnstile performs browser verification to prevent automated submissions and issues a token that our server validates with Cloudflare. Cloudflare documents that each token is usable once and expires after five minutes. A verification token is not itself a persistent advertising cookie. See Cloudflare’s Turnstile documentation.

Cloudflare can additionally issue a cf_clearance security cookie if Turnstile pre-clearance or other Cloudflare challenges are enabled. Its purpose is to remember a successful security check; its lifetime depends on the Cloudflare configuration. This cookie is optional for Turnstile, so a Turnstile widget alone does not establish that the cookie is present. See Cloudflare’s clearance documentation and Cookie Policy.

The waitlist reads referral and campaign parameters from the current page URL and submits the supported fields with your signup. The landing code does not save those parameters in cookies or local storage.

The current landing website does not include advertising cookies or separate audience analytics scripts. If we introduce optional tracking that requires consent, we will provide the necessary information and choice before it runs. Visiting the website is not consent to optional tracking.

Your browser lets you inspect, block, or clear cookies and site storage. Clearing preferences can make announcements reappear; blocking Cloudflare scripts or necessary security mechanisms may prevent you from joining the waitlist. Account areas, installed applications, and external download or social platforms may use other storage described in their own notices.

7. Cloudflare Turnstile

We use Turnstile to protect waitlist submissions from automated abuse. The browser runs verification, and our server sends the resulting token and your IP address to Cloudflare for validation. Blocking verification may prevent signup; contact support@spacerun.app for help.

Cloudflare processes IP addresses, TLS fingerprints, browser User-Agent headers, and the sitekey and associated origin. It acts as our processor when protecting this website and as a separate controller when using signals to improve its bot detection. Where EU or UK law applies, our security processing relies on legitimate interests in preventing abuse; Cloudflare explains its own legal basis in its notice.

Read Cloudflare’s Turnstile Privacy Addendum and Privacy Policy for its practices. These are Cloudflare’s notices; this section describes Spacerun’s implementation.

Contact support@spacerun.app about our processing, or Cloudflare’s privacy team at dpo@cloudflare.com about its own processing.

8. How long we keep information

We keep waitlist and invitation information while it is needed to manage your interest and provide access, taking into account whether you have joined, asked to leave, or the waitlist has ended. If you activate an account, information needed for that account is then handled under the applicable account privacy notice.

We keep correspondence for the time needed to resolve the request and related disputes. Security and operational records are kept according to their usefulness for investigating incidents and abuse. We may retain information longer where a legal obligation or an active legal claim requires it. Backup copies are removed through their normal replacement cycle rather than necessarily at the same time as active records.

Contact us for information about retention applicable to your record or to request deletion. Cloudflare’s handling of information for its own purposes is described in its notices linked from the Cloudflare Turnstile section above.

9. International processing and security

Spacerun is based in the United States. Our infrastructure and providers may process information in the United States and other countries with different privacy laws. Where EU or UK transfer restrictions apply, a permitted transfer mechanism is required, such as an applicable adequacy decision or appropriate contractual safeguards. Contact us for details of the locations and safeguards applicable to your information and how to obtain a copy of relevant safeguards.

We use technical and organisational measures intended to protect information, including encrypted connections and restricted access to administrative systems. No online service can guarantee complete security.

10. Your privacy choices and rights

Depending on the law that applies to you, you may request access to, correction of, deletion of, or a portable copy of your information, or restriction of its use. You may also withdraw consent where we rely on it. Some rights have legal exceptions.

You may object to processing based on legitimate interests and object to direct marketing at any time. To leave the waitlist, stop updates, or exercise a right, email support@spacerun.app. We may need reasonable information to verify that a request concerns your records. An authorised agent may contact us where local law permits. We will respond within the time required by applicable law and will not discriminate against you for exercising an applicable privacy right.

You may complain to your local data protection authority. UK residents can contact the Information Commissioner’s Office; EU and EEA residents can find their authority through the European Data Protection Board.

11. Children

The waitlist is not directed to children under 13. Children must also meet any higher minimum age or parental authorisation requirement that applies where they live. If you believe a child has submitted personal information without the necessary authorisation, contact us so we can investigate and remove it where appropriate.

12. Changes and contact

We will update the date above when this policy changes and provide additional notice of material changes where required. Questions and requests can be sent to support@spacerun.app, or to Spacerun, Inc, business address: ____, Delaware, USA.