PRIVACY POLICY
Last updated 26 July 2026
Icon is not open yet. This site is a pre-launch page. There is no account, no login and no payment.
The only personal data we ask for is one email address, and only if you choose to join the waitlist. We do not sell it, we do not profile you, and we will not add you to anything you did not ask for.
This policy explains how we handle personal data on this website. It is written to meet the UK GDPR and the Data Protection Act 2018.
Who we are
Icon is operated by [LEGAL ENTITY NAME], registered in England and Wales, company number [NUMBER], at [REGISTERED ADDRESS]. For anything in this policy, contact [PRIVACY EMAIL].
We are the data controller for personal data collected through this site.
What we collect
Automatically: nothing
This page runs no analytics, sets no cookies, and uses no tracking pixels or fingerprinting. Simply reading it puts nothing about you into our hands.
If you join the waitlist
We collect the email address you type in, and the date you submitted it. That is all. We do not ask for your name, location, date of birth or payment details to join a waitlist.
The form is delivered by Web3Forms (Karmanya Aggarwal, operating as Web3Forms), which receives your address solely in order to forward it to our mailbox at info@whiteaceai.com. They act as our processor and do not use it for their own purposes. Their privacy policy is at web3forms.com/privacy. After that point your address sits in an ordinary business mailbox.
Data your browser sends to third parties
Even with nothing collected by us, loading this page makes your browser request files from three external services. Those requests necessarily reveal your IP address, along with your browser and device type, to the companies that run them. We do not control what they do with that information.
| Service | Provided by | What it loads | Their policy |
|---|---|---|---|
| fonts.googleapis.com fonts.gstatic.com |
Google Ireland Ltd | The typefaces used on this page | policies.google.com/privacy |
| cdnjs.cloudflare.com | Cloudflare, Inc. | The 3D graphics library that renders the football | cloudflare.com/privacypolicy |
Both may transfer data outside the UK. If you would rather not have your IP address disclosed to them, a browser extension that blocks third-party requests will prevent it — the page will still function, though the fonts and the animated football will not load.
Why we would process your email, and our legal basis
| Purpose | Legal basis | Kept for |
|---|---|---|
| Telling you when early access opens | Consent — UK GDPR Art. 6(1)(a). You give it by submitting the waitlist form; you can withdraw it at any time by emailing us and asking to be removed. | Until you ask to be removed, or 24 months of no engagement, whichever comes first |
| Keeping a record that you asked to be contacted | Legal obligation — Art. 6(1)(c), read with PECR, which requires us to be able to evidence consent | Same as above, then deleted |
We will not use your email for anything else, and we will not add you to an unrelated mailing list.
Who we share it with
We do not sell your personal data, and we never will. We do not share it with advertisers or data brokers.
When the waitlist is live we expect to use an email delivery provider to send the announcement, acting as our processor under a contract that meets UK GDPR Art. 28. This policy will name that provider before any email is collected.
We may disclose data if we are legally required to — a court order or a lawful request from a UK authority.
Your rights
Under the UK GDPR you can ask us to:
- Give you a copy of the personal data we hold about you
- Correct it if it is wrong
- Delete it — and since our only basis is consent, we must comply
- Restrict or object to how we use it
- Port it to another service in a machine-readable form
- Withdraw consent, at any time, which is as easy as clicking unsubscribe
Email [PRIVACY EMAIL] and we will respond within one month, free of charge. We may ask you to confirm you control the email address, so we do not disclose data to the wrong person.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or call 0303 123 1113. We would appreciate the chance to put it right first.
Security
This site is served only over HTTPS, with HTTP Strict Transport Security. It applies a Content Security Policy restricting what the page may load and blocking it from being embedded in a frame elsewhere. Third-party code is pinned by cryptographic hash, so a modified version cannot execute. When the waitlist goes live, submitted addresses will be validated and stored in an access-controlled system.
No system is perfectly secure, but the amount of personal data involved here is deliberately kept to the minimum — one email address.
Children
This site is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us their email address, contact us and we will delete it.
Changes to this policy
If we change how we handle personal data we will update this page and the date at the top. If the change is significant and we already hold your email address, we will tell you directly.