Legal

Privacy Policy

We hold transparency as a design principle, not a legal obligation. Here's exactly what we collect, why, and the control you keep over it.

Effective 5 June 2026

The people responsible for your data.

ForEveryMind™ is a trading name of Moonwhisk Ltd, a company registered in England & Wales (company number 16501280) with its registered office at 128 City Road, London, EC1V 2NX.

For everything you do on www.foreverymind.com, Moonwhisk Ltd is the data controller under the UK GDPR and the Data Protection Act 2018. This notice covers the ForEveryMind marketing site only; the separate Moonwhisk and other product notices do not apply here.

We collect as little as possible — and only when you act.

This is a marketing site. We don't require an account and we don't track you across the web. Data reaches us only through the things you choose to do:

Contact form

Legitimate interest — to answer you

Your name, email address, the purpose you select, and your message.

Submissions are delivered to our inbox via Resend. We keep them only as long as needed to handle your enquiry and any follow-up.

Waitlist forms

Consent — you choose to sign up

The email address and any details you enter, plus which page you started from.

These forms are hosted by Tally. Your entry is stored in Tally on our behalf until we no longer need it.

Analytics

Consent — analytics cookies are off by default

Device type, browser, pages viewed, and approximate location from an anonymised IP.

We use Google Analytics 4 in consent mode. Nothing is measured until you accept analytics cookies, and you can withdraw at any time.

Spam protection

Legitimate interest — to stop abuse

Minimal request metadata needed to tell humans from bots.

Our contact form is protected by Cloudflare Turnstile and rate limiting. We don't use this data for any other purpose.

The lines we will not cross.

Our product exists to reduce the cognitive cost of software, and our data practices follow the same ethic. As a matter of architecture, not policy preference:

  • No biometric data. No cameras, microphones, eye-tracking, or physiological sensors — ever.
  • No behavioural surveillance. Where our SDK infers cognitive state, it does so locally in your browser. Raw behavioural signals are never sent to us.
  • No ad networks or third-party profiling. We don't sell, rent, or share your data with advertisers, and we run no tracking pixels.
  • No selling your data. Not now, not as a future business model.

Two kinds, and you control the second.

Strictly necessary cookies keep the site secure, protect our forms from abuse, and remember your consent choices. These are required for the site to work, so they don't need consent. They typically last from the end of your session up to a short period afterwards.

Analytics cookies are only set if you accept them. They help us understand which pages are useful. They last up to two years, or until you withdraw consent — whichever comes first. You can change your mind at any time.

The trusted services that help us run this site.

We use a small set of reputable providers. Each only processes the data needed for its job, under our instructions. Some are based outside the UK; where that happens, transfers are protected by Standard Contractual Clauses or an equivalent safeguard.

ProviderPurpose
VercelWebsite hosting and content delivery
ResendDelivering contact-form messages to us by email
TallyHosting our waitlist and sign-up forms
Google AnalyticsPrivacy-respecting, consent-based usage analytics
CloudflareBot protection (Turnstile) and form security
SupabaseStoring public game leaderboard scores (no personal data)
SanityManaging our blog content (no visitor data)

The data is yours. These rights make that real.

Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or hand it over in a portable format. Where we rely on your consent, you can withdraw it at any time.

To exercise any of these, get in touch. We'll respond within one month.

Data protection contact

Or write to: Moonwhisk Ltd, 128 City Road, London, EC1V 2NX, United Kingdom.

If we get it wrong, you can escalate.

We'd always like the chance to put things right first, so please contact us before anything else. But you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office.

You can reach the ICO at ico.org.uk or on 0303 123 1113.

When this changes, we'll say so.

We may update this policy as the site evolves or the law changes. The effective date at the top always reflects the latest version, and we'll flag any material changes clearly rather than burying them.

This policy is effective as of 5 June 2026.