Website privacy notice
Version 1.0 · last updated 31 August 2026 · applies to onefishtwofish.app
This page is about the website, not the app. The iPhone and iPad app has its own policy, and it is the one Apple lists on the App Store: read the app privacy policy. The two are kept separate so neither has to be read through the other.
In one line: this site sets no cookies, runs no analytics and embeds nothing from anyone else. The only thing that collects any information at all is the waitlist form, and the only thing it collects is an email address.
Who is responsible
One Fish Two Fish, the independent developer of the app of the same name, based in the United Kingdom, decides how any data described here is used — the data controller, in the language of the UK GDPR. The contact address for anything on this page is hello@onefishtwofish.app.
Cookies, analytics and third parties
There are none. These pages are static HTML and CSS served from one server. There is no cookie of any kind, no local storage, no analytics or tag manager, no advertising or attribution pixel, no embedded video or social widget, and no web fonts, scripts or images loaded from another domain. That is why you were not asked to accept anything when you arrived — there is nothing to consent to.
The small amount of JavaScript on these pages runs entirely in your browser: it fixes the header on scroll, updates the year in the footer, and submits the waitlist form.
Server logs
Serving a web page necessarily involves the server noting that it did so. The hosting provider records ordinary access logs — IP address, the page requested, the time, your browser's user-agent string — and does that for security and to keep the site running. These logs are not read for marketing, not built into profiles and not passed to anyone. The provider rotates and deletes them on its own schedule, typically within a few weeks.
The lawful basis for this is legitimate interests: a site cannot be operated or defended against abuse without it, and the logs are not used for anything beyond that.
The waitlist form
If you use the “notify me” form on the home page, your email address is sent to this same server. Nothing else is asked for and nothing else is required.
- What is collected. Your email address, and the date and time you submitted it.
- Why. To send you one message, telling you when the app is released. That is the whole purpose.
- Lawful basis. Your consent, given by choosing to submit the form. You can withdraw it at any time, and doing so is as easy as giving it — see below.
- Where it goes. To a file on this server and to the hello@onefishtwofish.app inbox. It reaches no third party: there is no mailing-list provider, no form service, no CRM and no analytics tool anywhere in the path.
- How long it is kept. Until the release email has gone out, at which point the list is deleted. Ask before then and yours goes sooner.
- What it is never used for. Any other mailing, any marketing beyond that one message, sale, sharing, or profiling of any kind.
The file the addresses are written to sits outside the public web root, so it cannot be requested over the web.
Email you send us
If you email hello@onefishtwofish.app — about support, a bug, or anything else — that message sits in an ordinary mailbox for as long as it is useful to keep, and is deleted once it is not. It is used to reply to you and nothing else.
Links to other sites
A few links here point elsewhere: Apple's privacy policy, the Information Commissioner's Office, the App Store. Following one takes you to a site with its own privacy practices, which this notice does not cover.
Your rights
Under the UK GDPR and the EU GDPR you have the right to ask what personal data is held about you, to have it corrected, to have it erased, to have it sent to you in a portable form, to object to its use, and to withdraw consent you have given. In practice the only personal data held here is a waitlist email address, and any of those requests about it will be honoured — erasure immediately, and the rest as soon as it can be read and answered, within one month at the outside.
No decision is made about you by automated means, and nothing here is transferred outside the UK or EEA beyond the ordinary operation of the hosting and email providers.
Ask at hello@onefishtwofish.app. If you are unhappy with the response, you can complain to the Information Commissioner's Office.
Changes to this notice
If the site ever gains something that changes any of the above — analytics, an embedded service, a hosted form provider — this notice is updated in the same change that adds it, and the version and date at the top change with it. A notice that quietly stops matching the site is worse than no notice at all.
Contact
Anything about this page, or about privacy in the app, goes to hello@onefishtwofish.app.