Privacy policy
Last updated 17 September 2026. Short version: we collect very little, and we never sell it.
1. Who is responsible
The data controller is MaxTheFun (company in formation). For anything about your personal data, write to privacy@maxthefun.com.
2. What this website collects
Browsing the site
This site has no analytics, no advertising trackers and sets no cookies. Our hosting provider, Amazon Web Services, necessarily processes your IP address to deliver pages to you. We do not keep access logs of visits.
The waitlist
If you join the waitlist we store:
- your email address;
- whether you signed up as a visitor or as an investor;
- the date and time you gave consent, the version of the consent wording, and the page you signed up from;
- a salted, one-way hash of your IP address. It is used only to limit abuse of the form and cannot be turned back into your IP address.
We use this to email you about the MaxTheFun launch and, if you signed up as an investor, with company updates. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time by emailing privacy@maxthefun.com, and we will delete your entry.
Email you send us
If you email us, we process your address and message to reply. Incoming mail is received through Amazon Web Services and delivered to our team mailbox, which is hosted by Google. The legal basis is our legitimate interest in answering you (Article 6(1)(f) GDPR).
3. How long we keep it
- Waitlist entries: until you withdraw consent, or 12 months after the app launches, whichever comes first.
- Abuse-prevention counters: up to 2 days.
- Email correspondence: as long as needed to handle your request, then no more than 24 months.
4. Who we share it with
We do not sell personal data and do not share it for advertising. We use these processors: Amazon Web Services (hosting, database and email, in the EU region of Ireland) and Google (team mailbox). Where a processor may handle data outside the European Economic Area, transfers rely on the European Commission's standard contractual clauses or an adequacy decision.
5. Your rights
Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with the data protection authority in your country. To use any of these rights, email privacy@maxthefun.com. We answer within 30 days.
6. The MaxTheFun app
The app has not launched. Before it does, this policy will be extended to cover it in full. The app is designed around these commitments:
- No account is required. The app identifies your installation with a random identifier stored on your phone.
- Email is optional, asked only after a purchase, and used only for receipts and restoring purchases.
- Payments are handled by Stripe. We never see or store your card details.
- Your location is used for live guidance in the park, only with your permission.
- No advertising trackers. You can delete your data from inside the app.
- Data is processed in the European Union.
7. Children
This website and the waitlist are intended for adults. We do not knowingly collect data from children under 16.
8. Changes
If we change this policy we will update the date at the top. For significant changes we will email waitlist members.