Privacy Policy
Last updated: November 2, 2026
Overview
At Atumcell (atumcell.com), your privacy matters. This policy explains what personal data we collect, why we collect it, how long we keep it, and what rights you have. If you have questions, contact us at v.depertis@atumcell.com.
Forms and Free Tools
- Contact, newsletter and resource forms: what you enter (such as your name, email and company) is emailed to our team, and new newsletter subscribers get a welcome email. The self-assessments run in your browser. If you ask for the PDF report, your answers are sent to our server to create it; we email the report to you and send our team a copy with your name, email and results.
- SpoofCheck: the domain you check is sent from your browser to our SpoofCheck service (spoofcheck.atumscan.com) and recorded in our analytics. If you ask for the PDF report, we email it to you and send our team a copy with your name and email.
- AtumSeal: your note is sent over HTTPS to the AtumSeal service (beam.atc-core.com) and stored until it is opened or expires (up to 30 days). If you ask to be notified, your email address goes to the same service. Our analytics tools collect nothing on note links, and note links are hidden from session recordings.
- Abuse protection and usage counts: to stop abuse, we count requests per network, email address and checked domain for up to 24 hours, storing keyed hashes rather than the addresses themselves. We also count how often SpoofCheck and AtumSeal are used; these counts are anonymous.
Your Rights (GDPR / EEA)
If you are in the European Economic Area (EEA) or UK, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (right to erasure)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (where processing is based on consent)
- Complain to your local data protection authority
To exercise any of these rights, email v.depertis@atumcell.com. We will respond within 30 days.
Legal Basis for Processing (GDPR Art. 6)
We only process personal data where we have a lawful basis to do so:
| Processing Activity | Legal Basis |
|---|---|
| Contact form submissions | Legitimate interest (Art. 6(1)(f)) — responding to business enquiries |
| Newsletter / marketing emails | Consent (Art. 6(1)(a)) — you tick an explicit opt-in checkbox |
| Analytics (Google Analytics 4, Microsoft Clarity, Ahrefs, Vercel Web Analytics) | EU/EEA, UK and Switzerland: consent (Art. 6(1)(a)) — via the cookie banner. Elsewhere: on by default; you can turn it off under Cookie Preferences |
| Performance measurement (Vercel Speed Insights) | EU/EEA, UK and Switzerland: consent (Art. 6(1)(a)) — via the cookie banner. Elsewhere: on by default; you can turn it off under Cookie Preferences |
| SpoofCheck PDF report delivery | Contract / consent (Art. 6(1)(b)/(a)) — you request the report and provide your email. Our team's copy: legitimate interest (Art. 6(1)(f)) — following up on your request |
| Service delivery (AtumSeal, SpoofCheck) | Legitimate interest / contract (Art. 6(1)(b)/(f)) |
| Abuse protection and anonymous usage counts | Legitimate interest (Art. 6(1)(f)) — keeping our forms and free tools safe and measuring their use |
| YouTube video on the Insights page | Legitimate interest (Art. 6(1)(f)) — showing our video; YouTube sets cookies only once you press play |
Data Retention
| Data Type | Retention Period |
|---|---|
| Form submissions (emailed to our team) | As long as we need them to answer and follow up on your enquiry; ask us to delete them at any time |
| Newsletter email addresses | Until you unsubscribe |
| GA4 analytics data | Up to 14 months |
| Microsoft Clarity session recordings | 30 days (up to 13 months for recordings our team saves) |
| SpoofCheck report requests (name and email, in our team's copy) | As long as we need them to follow up on your request; ask us to delete them at any time |
| AtumSeal notes | Until opened, or until they expire (up to 30 days) |
| Abuse-protection records (keyed hashes) | Deleted automatically within 24 hours |
| Cookie consent preference | Stored in your browser until you change it |
Cookie Policy
Cookies are small files stored in your browser; some of our tools use similar browser storage instead. In the EU/EEA, the UK and Switzerland, analytics and performance tools load only after you accept them in the cookie banner. Elsewhere they load by default. Wherever you are, you can change your choice at any time under Cookie Preferences.
We use three categories:
Necessary cookies
Always active — required for the site to function. Cannot be disabled.
| Name | Purpose | Retention |
|---|---|---|
| atumcell_cookie_consent | Stores your cookie consent choices | Until you change it |
| atumcell_consent_region | Remembers whether your region needs a cookie choice first (from your country, looked up when you arrive; not stored by us) | Until you close the tab |
| atumcell_exit_intent_shown | Remembers that you closed the offer pop-up | Until you close the tab |
| notePaths, copiedLinks | AtumSeal: shows the links of the note you created and which ones you copied | Until you close the tab (notePaths) or clear your browser data (copiedLinks) |
Analytics cookies
Help us understand how the site is used. In the EU/EEA, the UK and Switzerland, only loaded after you accept.
| Provider | Cookies | Purpose | Retention |
|---|---|---|---|
| Google LLC (GA4) | _ga, _ga_* | Measures visits, sessions, traffic sources | Up to 2 years |
| Ahrefs.com | None (cookieless) | SEO analytics — referral and search traffic | — |
| Microsoft (Clarity) | _clck, _clsk, MUID | Session recording and heatmaps, with typed text and private content hidden | Up to 1 year |
| Vercel Inc. (Web Analytics) | None (cookieless) | Counts page views and visitors | — |
Performance cookies
Measure page load performance. In the EU/EEA, the UK and Switzerland, only loaded after you accept.
| Provider | Purpose | Retention |
|---|---|---|
| Vercel Inc. (Speed Insights) | Measures Core Web Vitals (LCP, CLS, INP) — no cookies, no personal data | — |
YouTube
The video on our Insights page loads from youtube-nocookie.com, YouTube's privacy-enhanced mode, which sets no cookies until you press play. Once you play it, YouTube may store cookies or similar data in your browser under Google's privacy policy.
You can change your cookie preferences at any time using the link in the site footer.
Sub-processors
We use the following trusted third-party services to process data on our behalf. Each is bound by a Data Processing Agreement and applicable data protection law.
| Sub-processor | Purpose | Location |
|---|---|---|
| Google LLC (GA4) | Website analytics | USA (EU SCCs apply) |
| Microsoft Corp. (Clarity) | Session recording, heatmaps | USA (EU SCCs apply) |
| Ahrefs Pte. Ltd. | SEO analytics | Singapore / USA |
| Vercel Inc. | Website hosting, Web Analytics, Speed Insights | USA (EU data residency available) |
| Resend Inc. | Email delivery (form notifications, SpoofCheck reports) | USA |
| Upstash, Inc. | Abuse protection and anonymous usage counts (keyed hashes only, never IP addresses) | USA (EU SCCs apply) |
| Google LLC (YouTube) | Video player on the Insights page (cookies only once you press play) | USA (EU SCCs apply) |
Log Files
Our hosting provider (Vercel) processes standard request data: IP address, browser type, date and time, and referring page. It is used only to deliver the site and protect it from abuse, we don't use it to identify visitors, and it is kept for up to 30 days.
Children's Information
Atumcell does not knowingly collect personal data from children under 13. If you believe your child has provided us with personal information, contact us at v.depertis@atumcell.com and we will delete it promptly.
US Privacy Rights (CCPA)
If you are in the United States, you may have rights under applicable state privacy laws (CCPA, VCDPA, and others) to access, correct, or delete personal data we hold. To exercise these rights, contact sales@atumcell.com.
Scope
This policy applies only to our website (atumcell.com) and online interactions. It does not cover information collected offline or through other channels.
Contact
Data controller: Atumcell Inc., 26 Stetson Street, Brookline, MA 02446, USA.
Privacy queries: v.depertis@atumcell.com