Privacy
Operated by Axiom Synapse LLC (trading as Cancel Atlas) · 2810 N Church St, PMB 691717, Wilmington, DE 19802-4447, USA · Last updated: 2026-06-07.
Data controller: Axiom Synapse LLC, 2810 N Church St, PMB 691717, Wilmington, DE 19802-4447, USA — contact [email protected].
The short version
Cancel Atlas is built privacy-first: no advertising trackers, no analytics, no cookies, no fingerprinting. The site is static. We don’t build profiles of you, and we don’t sell data.
1. What the website collects
Browsing the site sets no cookies and runs no analytics or third-party trackers. Our host/CDN (Cloudflare) processes standard, transient request logs (e.g. IP, user-agent) for security and delivery, per Cloudflare’s policies; we do not use these to identify or track you. Our legal basis for these transient logs is our legitimate interest in security and delivery (GDPR Art. 6(1)(f)). Because we use no cookies or tracking, there is nothing to disable — so we do not act on Do Not Track signals.
2. The Contribute / right-of-reply form
If you voluntarily submit a contribution or right-of-reply, the form sends your input to an off-origin intake endpoint (never to this static site). You choose what to send — typically a company name, a description of the cancellation experience, an optional evidence link, and an optional email for follow-up. We use submissions solely to verify and improve records; a human reviews each before any change. We do not sell submissions or use them for marketing. Our legal basis is responding to your request and our legitimate interest in the index's accuracy (GDPR Art. 6(1)(b)/(f)). We keep a submission only as long as needed to resolve the relevant record — typically no more than 24 months — then delete it, including any optional email.
3. The dataset is about companies, not people
The published index rates companies and their public policies. It is not designed to contain personal data about individuals. If you believe a record contains personal data, contact us to have it reviewed.
4. Your rights
Depending on your jurisdiction (e.g. GDPR, UK GDPR, CCPA/CPRA), you may have rights to access, correct, or delete personal data we hold about you (primarily anything you submitted via the form). To exercise them, use the Contribute form — see our Contact page. We aim to respond within 30 days, or sooner where required by applicable law. If you are in the EU/UK you may also complain to your data-protection authority (in the UK, the ICO at ico.org.uk) — we ask you to contact us first so we can help.
5. Third parties
We rely on Cloudflare (hosting, CDN, security) and the off-origin intake endpoint for form submissions (the intake endpoint is an off-origin serverless function — a Cloudflare Worker). We do not embed advertising, social, or analytics third parties, and we maintain data-processing agreements with our processors. If you contact us from outside the United States, your message may be processed in the US under appropriate safeguards.
6. Children
The Service is intended for a general adult audience and is not directed to children under 13 (or under 16 in the EU/UK). We do not knowingly collect children's personal data; if you believe we have, contact us for prompt deletion.
7. Changes & contact
We may update this policy; the “last updated” date reflects the current version. Questions or requests: via the Contribute form.