← attach.sh

Website Privacy Notice

Last updated: March 25, 2026

1. Scope

This notice applies to the attach.sh marketing website and related static pages. It does not cover the Attach iOS app, which is covered by the separate App Privacy Policy.

The data controller is Arbiter Technologies Ltd. (UIC 207164164), Prof. Krastyo Mirski Str., Bl. 10, Ent. A, Apt. 8, Sofia 1407, Bulgaria.

2. Website Request Data

When you visit attach.sh, standard web request data may be processed by our hosting or delivery infrastructure to load the site and keep it secure. This may include your IP address, browser and device information, requested URL, referrer, and timestamps.

3. Google Fonts

The website currently loads fonts from Google Fonts. When those fonts are requested, your browser may connect to Google-controlled domains such as fonts.googleapis.com and fonts.gstatic.com.

• Those requests may reveal your IP address, browser information, and the fact that you visited attach.sh.
• Google processes that data under Google's own terms and privacy policies.

4. Push Notification Relay Endpoint

The attach.sh domain also hosts a push notification relay API endpoint (attach.sh/api) used by the Attach iOS app. This endpoint processes pairing tokens (random UUIDs) and Apple Push Notification device tokens to route encrypted notifications. It does not process website visitor data and is covered in detail by the App Privacy Policy.

5. What the Website Does Not Use

Based on the current website implementation, attach.sh does not use advertising networks, marketing pixels, or third-party analytics scripts. The website does not set first-party cookies.

6. Purpose of Processing

We process website-related data to serve the site, secure it, troubleshoot issues, and deliver its visual assets. We do not use the website to build advertising profiles.

7. Retention

Any server or CDN logs that exist for attach.sh are controlled by our hosting stack and may be retained for operational or security purposes for a limited period. Actual retention periods may vary by provider and deployment configuration.

8. Your Choices

You can avoid Google Fonts requests by not loading the website, by blocking those domains in your browser or network tools, or by using privacy tools that restrict third-party requests.

9. Changes to This Notice

We may update this Website Privacy Notice from time to time. Changes will be posted on this page with an updated revision date.

10. Your Rights Under EU Law

Arbiter Technologies Ltd. is the data controller for any personal data processed through the attach.sh website. The legal basis for processing website request data is our legitimate interest in serving and securing the site (GDPR Art. 6(1)(f)).

You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) or with the supervisory authority in your country of residence. For questions, contact support@arbt.tech.