Privacy Policy
What we collect, why we collect it, and how to get it deleted. This describes exactly what the site does today — a waitlist and an anonymous pageview counter — and nothing more.
Last updated August 3, 2026
Before you read on
The data controller is Afforai Inc.. Its registered postal address ([REGISTERED BUSINESS ADDRESS]) is an unresolved placeholder, not a stated fact — it will be filled in before launch. Everything describing what the site actually collects is accurate as of the revision date.
1.What we collect
When you submit the waitlist form, we store:
- your email address — normalised to lowercase, so we can contact you about early access;
- the game you selected, if you picked one (for example Pokémon or One Piece), so we can invite you when your game is ready;
- the time you signed up, so we can invite people in order;
- the signup source — a fixed label recording that the entry came from this website;
- your browser user-agent string, truncated, used only to detect automated or abusive signups.
We separately keep a single global pageview counter. It is one number for the whole site. It is not tied to you, your email, your session or your IP address, and it cannot be traced back to an individual visitor.
2.What we do not collect
We do not ask for your name, postal address, phone number, date of birth, or payment details. We do not run advertising trackers or third-party analytics profiles, and we do not set advertising cookies. There is no user account, so there is no password to store.
3.Why we are allowed to use it
You give us your email address voluntarily in order to be told when early access opens — that is our lawful basis for using it. The user-agent string and the aggregate pageview count rest on our legitimate interest in keeping the site working and free of abuse.
4.How we use it
Waitlist data is used to send you early-access and launch announcements, to order invitations, to prioritise which games to launch first, and to detect abusive or automated signups. We do not use it for anything else.
We do not sell, rent, or trade your email address.
5.Who can see it
Waitlist entries are stored in a hosted database and are visible only to the people who operate Collector Dream, through a password-protected admin area. We share data with third parties only where we must: our hosting and database providers (who process it on our behalf), and any authority we are legally required to disclose it to.
The site loads web fonts from Google Fonts. When your browser fetches them, Google receives the request as part of serving that file. If you would rather it did not, block third-party font loading in your browser.
6.Cookies
The public site sets no advertising, analytics, or tracking cookies. Browsing the site and joining the waitlist do not set a cookie at all.
One strictly-necessary cookie exists: it is issued only after a successful sign-in to our private admin area, and only to the person signing in. It holds a signed session token — never a password — and expires after 12 hours. As an ordinary visitor you will never be issued it.
7.How long we keep it
We keep your waitlist entry until the product launches and you have been invited, or until you ask us to delete it — whichever comes first. If the project is abandoned, waitlist data is deleted rather than transferred.
8.Your rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to its use, take it elsewhere, and withdraw consent at any time.
To exercise any of these, email [email protected]. Deletion is straightforward: your entry is a single record and we will remove it. You may also have the right to complain to your local data-protection authority.
9.Security
Waitlist entries are readable only through a password-protected admin area; the admin session cookie is HTTP-only and marked secure in production. No system is perfectly secure, but the data we hold is deliberately minimal — an email address, a game preference and a timestamp — which limits what a breach could expose.
10.International transfers
Our hosting and database providers may store data in a country different from yours. Because the operating entity and its establishment ([GOVERNING JURISDICTION]) are not yet resolved, we are not stating a specific transfer mechanism here. This clause will be completed before launch.
11.Children
The waitlist is not directed at children. If you believe a child has submitted an email address, contact [email protected] and we will delete it.
12.Changes to this policy
If we change what we collect or why, we will update this page and move the revision date at the top. Material changes will be emailed to waitlist members.
13.Contact
Privacy questions and data requests: [email protected].