Privacy policy

APHVN Limited ("APHVN", "we", "us") is a company registered in England and Wales, company number 15968200. We are the data controller for the personal data described in this policy.

You can reach us about anything in this policy at [email protected].

This policy covers the website at aphvn.com. It does not cover our apps: each one published on the App Store or Google Play has its own privacy policy, linked from its store listing and from inside the app.

We do not ask you to create an account on this website, and we do not sell personal data.

• Analytics. We use Google Analytics 4 (measurement ID G-THMB0GKLR2) to understand how the site is used - which pages are opened, how people arrive, and roughly where in the world they are. Google Analytics sets identifiers in your browser and processes your IP address; IP addresses are shortened by Google before being stored. We see aggregate reports, not individual people.
• The interactive desktop. The homepage has shared, real-time toys - lightning strikes, cursors and presence - powered by Ably. While your tab is open, your browser publishes a random per-tab identifier and the position of your pointer within the page, so other visitors can see the same effects at the same time. This identifier is not tied to you, is not written to our database, and disappears when you close the tab.
• Hosting and security logs. The site is served by Cloudflare Pages. Cloudflare processes request data - including your IP address, user agent and the pages requested - to deliver the site and protect it from attack.
• Email. If you email us, we hold your message and your address so we can reply and keep a record of the conversation. Our mail is hosted by Proton.

We do not run advertising or ad-tracking pixels on this site, and we do not use it to build profiles of visitors.

The only non-essential technology on the site is Google Analytics, which stores a first-party cookie (in the _ga family) in your browser to tell repeat visits apart. It typically expires after two years.

You can clear or block these cookies in your browser settings at any time, or install Google's opt-out add-on. Blocking them does not affect how the site works.

Loading a page here causes your browser to make requests to a small number of external services. Each one necessarily sees your IP address and browser details:

• Cloudflare - hosting, delivery and security.
• Google - Google Analytics, and Google Fonts for typefaces.
• Ably - real-time messaging for the shared homepage effects.
• Cataas - the cat photos used as visitor avatars are fetched from cataas.com.
• Proton - email hosting, if you write to us.

These providers act as our processors or, where they determine their own purposes, as separate controllers under their own policies. We also disclose data where we are legally required to, or to establish or defend legal claims.

Some of these providers process data outside the UK, including in the United States. Where that happens, transfers are covered by the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or an adequacy decision, as applicable.

• Analytics data: retained by Google for up to 14 months, then deleted automatically.
• Real-time session data: held only for the life of your browser tab.
• Hosting and security logs: kept for a short period by Cloudflare in line with their retention policy.
• Email: kept while the conversation is live and for as long as we need a record of it, normally no more than three years.

Under the UK GDPR we rely on consent for analytics cookies and similar storage, and on our legitimate interests in running, securing and improving the site, and in answering the messages people send us. Where we rely on legitimate interests, we have satisfied ourselves that they are not overridden by your rights.

You have the right to ask us for a copy of your personal data, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on consent, you can withdraw it at any time without affecting what came before.

Email [email protected] and we will respond within one month. If you are not satisfied, you can complain to the UK Information Commissioner's Office at ico.org.uk, though we would rather hear from you first.

This website is aimed at businesses and adults, and we do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

If we change how we handle personal data we will update this page and the date at the top. Material changes will be made obvious on the site.