Home How it works For clubs Roadmap FAQ About
Legal

Privacy
Policy.

Effective: 1 March 2026  ·  Last updated: 1 March 2026  ·  GDPR compliant

The short version
  • We collect only what you give us in the early access form, plus technical data sent automatically by your browser.
  • We use it solely to contact you about the AUN launch. Nothing else.
  • We do not sell, rent, or share your data with advertisers or third parties.
  • We store everything on EU-based servers.
  • You can request deletion at any time by emailing Get in touch →.
01

Who we are

AUN ("Ace Up Next") is a pre-launch sports technology service. We are currently operating as an early access waitlist at aunweplay.com, collecting sign-ups ahead of our Q2 2026 product launch.

For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is the individual or entity operating the AUN early access programme. Data controller contact: Get in touch →.

02

Data we collect

When you submit the early access form at aunweplay.com/join.html, we collect two categories of data:

A — Data you provide directly

FieldWhy we askRequired?
Full nameTo address you personally in our launch communicationsYes
Email addressTo contact you about early access and the product launchYes
RolePlayer, Club, Organiser or Other — to tailor communications to your use caseNo
Sports you playTo understand which sports the community plays, for product prioritisationNo
Country & cityTo understand where our users are, for launch planning and market prioritisationCountry yes, city no
Postal codeFor more precise regional planningNo
Free-text notesAny additional context you choose to share (club name, questions, ideas)No

B — Data collected automatically when you submit

Data pointSourceWhy we collect it
IP addressServerFraud prevention and spam filtering
Approximate locationIP geolocation via ip-api.comTo verify the location you selected and understand our user geography. City-level accuracy, not GPS.
Internet Service Provider (ISP)IP lookupFraud and bot detection
Device platformBrowserTo understand how users access the site
Screen resolution & viewportBrowserTo improve form design and responsiveness
Browser languageBrowserTo understand which languages our users prefer
TimezoneBrowser (Intl API)Additional confirmation of user location for launch planning
Touch capabilityBrowserTo distinguish mobile from desktop users
Connection typeBrowserTo understand connectivity of our user base
Full user agent stringBrowserBrowser and OS identification for technical analytics
Submission timestampBrowser + ServerRecord of when the sign-up was made
Page URL & referrerBrowserTo understand which source drove the sign-up

All data is stored in a JSON log file on our server and sent to our team email address. No third-party analytics platform, advertising pixel, or tracking tag is used on this website.

What we do not collect: phone numbers, home address, payment data, precise real-time GPS coordinates, contacts from your device, social media profiles, or any biometric data.

03

How we use it

We use the data collected exclusively for the following purposes:

  • Early access communications — to email you before and at launch with your early access invitation, product updates, and onboarding information
  • Launch planning — to understand which cities, countries, and sports to prioritise at launch
  • Product development — aggregate, non-identifiable analysis of which roles and sports are most common
  • Fraud and spam prevention — to detect and remove duplicate or bot-generated submissions
  • Legal compliance — to retain records as required by applicable law

We do not use your data for advertising, behavioural profiling, sale or rental to any third party, or any purpose not listed above.

04

Legal basis (GDPR)

Processing activityLegal basis
Storing and using your name, email, and form responsesConsent (Art. 6(1)(a)) — you explicitly tick the consent checkbox before submitting. You may withdraw at any time.
Collecting automatic technical data at time of submissionLegitimate interests (Art. 6(1)(f)) — to prevent spam and fraud.
IP-based geolocation (city-level)Legitimate interests (Art. 6(1)(f)) — to verify geographic information and plan launch markets.
Retaining records for legal purposesLegal obligation (Art. 6(1)(c))
05

Who we share with

We do not sell, rent, or trade your personal data. The following third-party services are involved:

ProviderPurposeData transferred
Namecheap (hosting)Servers where the website and submissions file are storedAll submitted data at rest on shared hosting servers
ip-api.comIP geolocationYour IP address is sent to ip-api.com at time of form submission
CloudflareDNS, DDoS protection, email obfuscationIP address and request metadata as part of traffic routing
Google FontsLoading typefacesYour IP address is sent to Google's servers when fonts load
06

How long we keep it

DataRetention period
Waitlist submissions (name, email, form responses)Until 90 days after the AUN product launch, or until you request deletion — whichever comes first
Technical metadataSame as above
IP address & geolocation dataStored up to 90 days post-launch, then deleted
Email correspondenceRetained for up to 2 years for support and legal purposes

You can request deletion at any time by emailing Get in touch →. We will confirm deletion within 7 days.

07

Your rights

Under the GDPR, you have the following rights. Use our contact form to exercise any of them. We will respond within 30 days.

  • Access — request a copy of all personal data we hold about you
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion of your submission and all associated data
  • Restriction — ask us to pause processing while a dispute is resolved
  • Data portability — receive your data in a structured, machine-readable format (JSON)
  • Object — object to processing based on legitimate interests
  • Withdraw consent — withdraw your consent at any time by emailing us

You also have the right to lodge a complaint with your national data protection authority. In Germany: Berliner Beauftragte für Datenschutz und Informationsfreiheit.

08

Cookies

This website uses no cookies of our own. We do not set session cookies, preference cookies, analytics cookies, advertising cookies, or any tracking pixels.

Cloudflare may set a short-lived security cookie (__cf_bm) to distinguish humans from bots. This cookie contains no personal information and expires within 30 minutes. It is set by Cloudflare, not by AUN.

Google Fonts loads typefaces from Google's servers when you visit this page. Google may log your IP address as part of this request.

09

Children

AUN is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has submitted the form, please contact us at Get in touch → and we will delete the record immediately.

10

Changes to this policy

We may update this Privacy Policy as the service evolves. When we make material changes, we will update the "Last updated" date at the top of this page. If the changes significantly affect how we process waitlist data, we will notify you by email before the changes take effect.

Continued use of the site after a policy update constitutes acceptance of the revised terms. If you disagree, you may request deletion of your data at any time.

11

Contact

For any privacy questions, data requests, or concerns:

We aim to respond to all privacy requests within 5 business days and are required to respond within 30 days under GDPR. You'll get a real answer from a real person.