Privacy policy
Last updated 24 September 2026
This policy explains what personal information we collect on this website, why, and what you can do about it. It covers cleanunlock.com, the £5 founding deposit and our launch-email list. The CleanUnlock app will have its own privacy notice when it launches.
In short: our analytics are cookie-free, we don't sell your data, and we only collect what we need to take your deposit and keep you updated.
1. Who we are
CleanUnlock is run by a sole trader business based in the United Kingdom. We're the data controller for the information described here. Contact us about anything in this policy at team@cleanunlock.com.
2. What we collect
- If you pay a deposit: your email address, name and billing country or postcode, as entered on Stripe's checkout page, plus the payment amount, date and status. Stripe collects your card details directly; we never see them. We also record which button and which version of our page you came from, so we know which of our messages works.
- If you join the launch list: your email address and the date you signed up.
- If you email us: your email address and whatever you tell us.
- When you visit the site: anonymous usage statistics (see section 4).
- If you accept the advertising cookie: the information Meta collects (see section 5).
Our web server doesn't keep access logs. Our checkout and email-signup services hold your IP address briefly in memory to block abuse. They don't write it down.
3. Why we use it, and our lawful basis
- Taking and refunding your deposit, sending your founding code, and dealing with your emails: to perform our contract with you.
- Sending depositors occasional progress updates and early access: our legitimate interest in keeping founding families informed about what they've paid towards. Every email lets you opt out.
- Emailing the launch list: your consent. We'll only use it to tell you when CleanUnlock launches, and you can unsubscribe any time.
- Anonymous analytics: our legitimate interest in understanding how the site is used, which doesn't identify you.
- The Meta advertising cookie: your consent, which you can withdraw.
- Keeping payment records: legal obligation (UK tax law).
- Preventing fraud and abuse: our legitimate interest in keeping the site and payments safe.
4. Analytics
We use Plausible Analytics, which we run ourselves on our own server. It uses no cookies and doesn't track you across sites. It uses your IP address and browser details only to generate a random identifier that changes every day, and it doesn't store your IP address. What we see is aggregate: pages visited, where visitors came from, country, device type, and whether people clicked the deposit button or completed a deposit.
5. Cookies and the advertising cookie
We don't set any cookies unless you choose to.
When we advertise on Facebook and Instagram, we ask whether you'll accept a Meta advertising cookie. Only if you click Accept, the Meta Pixel loads and tells Meta that you visited, clicked to reserve, or paid a deposit. If you then pay a deposit, our server also sends Meta a confirmation of that payment (the amount, your email address in hashed form, which is a one-way code rather than the address itself, your browser type, and the ad you clicked, if any), so Meta can match the deposit to the ad. That lets us measure whether our ads work. Meta Platforms Ireland Limited also uses this information under its own privacy policy. If you click "No thanks", nothing is sent to Meta.
We remember your choice in your browser's local storage, not a cookie. To change your mind, clear this site's data in your browser settings and we'll ask again.
Stripe sets its own cookies on its checkout page for security and fraud prevention.
6. Who we share it with
We don't sell your data or share it for other companies' marketing. We use these providers to run the site. They process data on our behalf, or as stated:
- Stripe: payments. Stripe also acts as a controller for its own fraud-prevention and legal obligations, and may use automated checks to screen payments for fraud.
- Hetzner: our server, in Germany, which runs the site, analytics and launch list.
- Cloudflare: domain name service and email forwarding.
- Our email provider: to receive and send email.
- Meta: only if you accept the advertising cookie.
We may also share information if the law requires it, or with a buyer if CleanUnlock is sold, in which case this policy continues to protect your data.
7. International transfers
Some providers, such as Stripe and Meta, may process data outside the UK, including in the United States. When they do, we rely on UK adequacy regulations (including the UK-US data bridge) or approved safeguards such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
8. How long we keep it
- Payment records: six years from the end of the tax year they relate to, as UK tax law requires.
- Depositors' contact details for updates: until your founding code's redemption deadline has passed or you're refunded, whichever comes first. After that we keep only the payment record above.
- Launch list: deleted once we've sent the launch email, or 12 months after you signed up if we haven't launched by then.
- Emails you send us: as long as needed to deal with them, and no more than 2 years.
- Analytics: aggregate and anonymous, so we keep it indefinitely.
9. Your rights
Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Where we rely on consent, you can withdraw it at any time; this doesn't affect what we did before. Email team@cleanunlock.com and we'll respond within one month. Some rights have limits; for example, we must keep payment records for tax purposes.
If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
10. Children
This website is for parents and carers. It isn't directed at children, and you must be 18 or over to pay a deposit or join the launch list. We don't knowingly collect children's data here. If you think a child has given us their details, email us and we'll delete them.
11. Changes to this policy
We'll update this policy when what we do changes, and change the date at the top. If a change significantly affects how we use data you've already given us, we'll tell you by email first.