Privacy Policy
Welcome to UnitUnite.com ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy details how we collect, use, process, and disclose your information when you visit our landing page, use our gateway, or connect to the st.unitunite.com Stoat communication server.
This policy is designed to comply with the state laws of New Hampshire, United States (including the New Hampshire Privacy Act), the European General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other international data protection frameworks.
1. Scope & Contact Information
This policy applies directly to all web visitors and network participants accessing services hosted on the unitunite.com domain, subdomains, or integrated brand pipelines.
The Data Controller for this site is Matt. For any questions, data access requests, or deletion requests, please contact us directly at:
Email: matt@mattyjacks.com
Subject: Privacy Operations - UnitUnite
2. Data Collection & Third-Party Service Providers
To maintain security, track analytics, host files, and enable real-time messaging, we integrate with several industry-standard third-party providers. Below is a detailed breakdown of what data is collected and processed:
A. Vercel (Hosting & Edge Deployment)
Our web frontend is hosted on Vercel. Vercel automatically collects access log data from your browser, which may include your IP address, browser type, operating system, referring URL, and the times/dates of your visits. This data is processed at the network edge to deliver files quickly and prevent DDoS attacks.
B. Google Analytics (Usage & Event Tracking)
We use Google Analytics to analyze visitor behavior and optimize site performance. Google Analytics collects anonymized interaction data such as scroll depth, button click events, time spent on pages, and general geographic regions. This service stores tracking identifiers via cookies.
C. Cloudflare (Domain Registrar, DNS, & Security)
Our domain is registered and managed through Cloudflare. Cloudflare operates as a reverse proxy, filtering all network traffic to protect against bots and security threats. Cloudflare processes transient request headers and IP addresses to maintain security logs.
D. GitHub (Code Repository & Integrations)
Our source code is versioned on GitHub, which integrates with our deployment pipeline. No personal user data is transferred to GitHub, except for administrative access keys and public deployment logs.
E. Stoat (Group Communication Server)
UnitUnite coordinates group communications via the Stoat server located at st.unitunite.com. When you register, log in, or transmit data through this Stoat instance, we process:
- Authentication Details: Username, password hashes, and session authentication keys.
- Communication Payloads: Text chat messages, system files, and metadata transmitted to channels. Keep in mind that group chat messages are visible to other authorized participants in those channels.
- Connection Logs: IP address, device ports, and socket state logs to maintain active web-socket connections.
3. Cookies and LocalStorage Policy
We utilize cookies and browser LocalStorage to improve your user experience and track analytics:
- LocalStorage: We store your UI theme preference (e.g.,
unitunite-theme) and temporary gateway checkbox agreements locally in your browser. This data never leaves your device. - Analytics Cookies: Google Analytics places persistent cookies in your browser to identify returning users. You can block cookies through your browser settings or install the Google Analytics Opt-out browser extension.
4. Your Rights (New Hampshire, US & International)
Depending on your location, you have legal rights regarding your personal data.
A. New Hampshire Resident Rights
Under the New Hampshire Consumer Data Privacy Act, NH residents have the right to:
- Confirm whether we process your personal data and access such data.
- Correct inaccuracies in your personal data.
- Request deletion of personal data provided by or obtained about you.
- Obtain a portable copy of your data (data portability).
- Opt-out of the processing of personal data for purposes of targeted advertising, sale, or profiling in furtherance of decisions that produce legal or similarly significant effects. (We do not sell your data or use automated legal profiling).
B. GDPR Rights (EEA & UK Residents)
European users possess rights under Chapter 3 of the GDPR, including the right to rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object to automated processing.
C. How to Exercise Your Rights
To exercise any of these rights, please send an email to matt@mattyjacks.com. We will respond to your request within the legally mandated time frame (generally 45 days for US states and 30 days for GDPR). We may request proof of identity to protect against unauthorized data access.
5. Data Retention & Security
We retain Stoat chat data and connection logs only as long as necessary to facilitate the communication groups of the MattyJacks brands. Anonymized analytics data is aggregated and retained indefinitely. We deploy standard security practices, including SSL encryption (HTTPS) across all endpoints, to protect your data during transit.
6. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted directly on this page with an updated "Last Updated" timestamp. We encourage you to review this policy periodically.