Legal / Privacy Notice
Privacy,
plainly.
Version 2026-08-14.1 / effective 14 August 2026
The operator of intimatesatlas.com is responsible for the personal information described here. We minimize collection, do not sell personal information, do not share it for cross-context behavioral advertising, and do not use targeted advertising. Optional analytics and browser preferences require an affirmative choice.
Information we handle
- Security and access: Turnstile challenge outcome, signed human and consent sessions, security events, ordinary edge request data such as IP address, headers, and timestamps processed by Cloudflare, and Cloudflare's coarse country and first-level region code used in memory to enforce jurisdiction availability.
- Consent evidence: a random consent identifier, policy versions, category choices, GPC state, and acceptance time. The acceptance ledger does not store your IP address or user agent.
- Catalogue actions: pseudonymous product or image hearts and hides tied to the signed consent identifier; filters and compare choices ordinarily stay in memory.
- Optional analytics: submitted search text, result count, source of submission, a random submission identifier, and editorial interaction events. Do not enter sensitive or identifying information in search.
- Member services: name, email, password verifier, subscription state and Stripe identifiers, saved searches, selections, hearts, hides, preferred currency and destination, watched products or stores, and alert history.
- Public retail data: product facts, prices, availability, imagery, retailer links, and historical price observations captured from public retailer catalogues.
Why we use it
| Purpose | Basis used where applicable |
|---|---|
| Deliver the site, verify humans, prevent abuse, remember legal choices, and perform requested actions | Contract or steps you request; legitimate interests in security and reliable operation; compliance with legal obligations |
| Provide paid accounts, billing access, saved libraries, price tracking, currency conversion, and alerts | Perform the membership agreement; comply with tax, accounting, fraud, and consumer law |
| Remember optional browser preferences | Your consent, withdrawable at any time |
| Measure submitted searches and interaction events | Your consent, withdrawable at any time |
| Establish, exercise, or defend legal claims and respond to lawful requests | Legal obligation and legitimate interests, subject to mandatory local limits |
Recipients and international processing
Cloudflare provides edge hosting, D1 database, R2 image cache, Turnstile, security, and, when enabled by consent, Analytics Engine. Stripe processes checkout, subscriptions, payment methods, billing portal access, fraud signals, and transaction records under its own privacy terms. Retailers receive data directly from your browser when you follow an external source link. Service providers may process information only for documented services, legal compliance, security, or claims.
These providers and the operator may process information outside your country. Where law requires, transfers must use an adequacy decision, contractual safeguard, certification, or another lawful mechanism. Mandatory localization and transfer rights remain available.
Retention and security
Human sessions last 12 hours, legal-choice cookies 180 days, and member sessions 30 days. Raw submitted-search events are scheduled for deletion after 180 days. Account information is kept while an account is active and afterward only for deletion requests, billing, fraud, disputes, or mandatory recordkeeping. Consent evidence and transaction records may be retained through applicable limitation and statutory periods. Pseudonymous editorial votes remain until reversed, deleted, or no longer operationally necessary. Country and region codes used for the site's jurisdiction gate are not written to the application's account, consent, or analytics databases. Cloudflare and Stripe retain their records under their configurations and notices.
We use signed HttpOnly cookies, same-origin checks, bounded request bodies, prepared database statements, password hashing, access controls, encrypted transport, and Cloudflare edge jurisdiction controls. No system is completely secure; incidents are assessed and notified where law requires.
Your choices and rights
Depending on where you live, you may request access, correction, deletion, restriction, portability, or an explanation; object to certain processing; withdraw consent; opt out of sale, sharing, or targeted advertising; limit certain sensitive-data uses; appeal a denied request; or complain to a privacy authority. We do not discriminate for exercising applicable rights. Because some catalogue actions are intentionally pseudonymous, we may need the browser holding the signed consent record or other reasonable verification to locate them.
Use the site's Privacy choices control to withdraw optional consent. Send rights requests to privacy@intimatesatlas.com. State your jurisdiction and request. We will verify only what is reasonably necessary, respond within applicable deadlines, and explain any lawful refusal or appeal route.
Children
The service and paid membership are not directed to children under 18. We do not knowingly collect personal information from a child where parental or guardian authorization is required. A parent or guardian may request deletion through the privacy contact.
Changes and contact
Material changes receive a new version and may require renewed choices or Terms acceptance. The current notice remains linked on every page. Privacy and accessibility questions: privacy@intimatesatlas.com. Legal notices: legal@intimatesatlas.com.
Local privacy, consumer, accessibility, employment, tax, and sector-specific laws may grant rights beyond this notice. Nothing here limits a mandatory right.