Website privacy

1. What does this policy cover?

This policy covers the checkmess.com promotional website, launch-announcement signups and contact with its support team. It does not describe data processing by the upcoming CheckMess iOS and Android apps: their privacy information will be published before launch.

The pages are static; secure functions handle the forms when enabled. The website offers no player accounts, game login or payments. A form shown as unavailable does not confirm any signup or message submission.

2. Data controller

Equaviz OÜ, an Estonian company registered under number 17542633, with its registered office at Harju maakond, Tallinn, Lasnamäe linnaosa, Lõõtsa tn 5, 11415, Estonia, is responsible for data processing related to this website and its support.

For any request: [email protected]. Full publisher details are provided in the legal notice.

3. Browsing and security

Images and fonts are hosted with the website, without advertisements or social widgets. The hosting provider is Cloudflare. To deliver pages and protect forms, it may process IP addresses, browser information, timestamps and security events. Cloudflare Turnstile bot protection loads only on pages with an enabled form. The legal basis is our legitimate interest in maintaining an available service and preventing abuse.

The website does not store IP addresses in the waiting list or log form content in its code. Any technical logs kept by Cloudflare depend on the service and its configuration; their applicable retention period must be specified when hosting is activated. See the Cloudflare privacy policy and its data processing agreement.

4. Cookies and preferences

The website code sets no advertising cookies and includes no audience measurement or profiling tools. Your browser language determines the initial language. If you choose Français or English, this preference is stored only in your browser under the checkmess-language key; it is not sent to our database. You can change it using the FR/EN selector or remove it from your browser data.

Your animation pause choice stays within the open page. Any strictly necessary Cloudflare security mechanisms depend on its configuration. If non-essential trackers are added, we will provide information and obtain consent where required.

5. Receiving the launch announcement

With your explicit consent, we store your email address, the date and version of your consent, the signup source and, where applicable, the notification or withdrawal date. This data is used only to announce the launch of CheckMess, not to send a newsletter.

The list is stored in a dedicated Supabase table. It is separate from game accounts and profiles, even when the same infrastructure is used. Signing up does not create a player account. Access is restricted to authorised Equaviz OÜ staff and providers needed to store the list and send the announcement.

Signups are retained until 30 days after the announcement, or up to 12 months after your consent if launch is delayed. You may withdraw your consent without giving a reason by emailing [email protected]. Minimal withdrawal information may be retained until the campaign ends to avoid contacting you again. Withdrawal does not affect the lawfulness of prior processing.

6. If you contact us

The contact form requires your email and message to answer your request. You may also provide your first name, last name, company and phone number: all four fields are optional. The legal basis is our legitimate interest in providing support or, where applicable, pre-contractual steps you request. Sending a message does not sign you up for the launch announcement.

Resend routes the message to [email protected], with [email protected] copied. It is then accessible to support staff and the relevant email providers. Support correspondence is retained while the request is handled and for up to 12 months after closure, unless a legal obligation or dispute requires restricted archiving.

An email contact link opens your email app and sends nothing automatically. Please do not send passwords or sensitive data unnecessary for your request.

7. Providers and transfers

The intended technical recipients are Cloudflare for hosting and security, Supabase for the waiting list and Resend for email delivery. Some providers may process data outside the European Economic Area. Applicable safeguards, including standard contractual clauses where needed, must be verified when configuring the services.

For more information: Supabase privacy, Supabase data processing agreement, Resend privacy and Resend data processing agreement.

8. Your rights

Under applicable law, you may request access, rectification, erasure, restriction and portability of your data, object to processing based on our legitimate interests and withdraw your consent.

Send your request to [email protected]. Additional information may be needed to verify your identity proportionately. You may also contact theEstonian Andmekaitse Inspektsioon, or the competent authority in your country of residence.

9. Website changes

This policy will be updated before new processing is enabled, such as player accounts or a leaderboard. The date at the top of this page identifies the latest version.