Last updated: September 22, 2026
Atomics (atomics.app) is operated by Firebrand Developments LLC ("we", "us"), 150 Mercer St, Unit 1084, Hightstown, New Jersey 08520, USA. This policy explains what we collect when you use Atomics, why, who else receives it, how long we keep it, and the choices you have. Questions go to support@atomics.app.
You can use local spaces without an account. If you register, we store the username you choose, your email address, and, if you add them, a display name, profile photo and phone number. We store a securely hashed passphrase or the public key of your passkey, never the passkey itself. If you sell items in a space, we store the payout wallet address you give us.
Each time you sign in we record the time, your IP address, the approximate location derived from it (country and region), your device and browser type, and the user agent string. We use this to keep your account secure, to show you where you are signed in, and to email you an alert about new sign-ins.
Cloud spaces and everything in them: notes, text, tables, images, video, audio, documents, links, embeds, maps, automations, and the files you upload, share to Atomics, or submit through a form someone has published. We also store your assistant conversations for cloud spaces, access requests (including any note you add), and who you have shared a space with. You control this content. We process it to store, sync, display and share it as you direct.
Subscriptions and donations are processed by Stripe. Stripe collects your card details and billing email directly. We receive your subscription status, plan and billing period, and never see your full card number. If you pay for an item with USDC, the payment happens on a public blockchain from your own wallet. We see the wallet address and transaction, and so can anyone who looks at that blockchain.
When you visit Atomics we log the page requested (including its query string), the time, your IP address, approximate location, referring page, browser, device type, and your account ID if you are signed in. We use this to operate and secure the service, count visitors, and understand which parts of Atomics are used. We also use Cloudflare Web Analytics, a privacy-focused analytics tool that does not use cookies or track you across sites.
If you email support or feedback, or use the enterprise contact form, we keep what you send: typically your name, work email, organization, role, team size and message.
When you use the assistant, the content needed to answer your request is sent to the AI provider behind the model you pick. That can include your message, earlier messages in the conversation, images you attach, and content the assistant reads from your space. Depending on the model, that provider is Anthropic, OpenAI, OpenRouter (which routes to the model's maker), DeepSeek, Google, or Cloudflare Workers AI. Requests may pass through Cloudflare AI Gateway.
Voice conversations stream your microphone audio to OpenAI while voice mode is on. PDF and Office files you convert are processed by Cloudflare. Search inside your spaces may use embeddings computed by Cloudflare Workers AI or by a model that runs entirely in your browser. Models marked as running in your browser send nothing to anyone.
If you add your own API key for a provider, it is kept in your browser's local storage and sent with each request to that provider. Your use is then also covered by your own agreement with that provider.
We do not use your content to train AI models. The providers above receive your content to answer your request and handle it under their own API terms. Their policies describe what they retain and for how long.
We use these service providers to run Atomics. Each receives only what it needs for its part:
We may also disclose information when the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of the business, in which case this policy continues to apply to your data. We do not sell your personal information or share it for cross-context behavioral advertising.
Atomics sets only the cookies it needs to work:
Atomics also uses your browser's local storage and IndexedDB for local spaces, your theme and preferences, your AI model choice and any API keys you add, and a connected wallet address. These stay on your device until you clear them. We do not use advertising or cross-site tracking cookies, so there is nothing to opt out of.
You can delete your account from the Account page with "Terminate this account". This removes your profile, sign-in methods and passkeys, cancels any active subscription, and deletes the cloud spaces your account owns. Copies in backups are overwritten in the normal course. Local spaces live in your browser, so clear them there. Content you added to other people's spaces stays in those spaces.
You can see, correct, export and delete most of your data yourself: on the Account page, and by exporting any space as a file. You can also email us to ask for a copy of your data, a correction, or deletion, or to object to or restrict how we use it. We will respond within the time the law allows (30 days under GDPR, 45 days under California law). We will not treat you differently for exercising these rights.
California and other US states: in the last 12 months we collected identifiers (username, email, phone, IP address), commercial information (subscription and purchase records), internet activity (usage logs), approximate geolocation, audio (voice mode), and the content you create. We use these for the purposes described in this policy. We do not sell or share personal information, and do not use sensitive personal information to infer characteristics about you.
EU, EEA and UK: we process your data to provide the service you signed up for (contract), to keep it secure and improve it (legitimate interests), to meet legal obligations, and where you have agreed (consent, for example push notifications and voice mode, which you can withdraw at any time). Our service providers may process data in the United States and other countries. Where required, we rely on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework. Cloud spaces can be placed in the EU when you create them. You can complain to your local data protection authority.
Data travels over encrypted connections, sign-in cookies are HTTP-only and secure, and passphrases are hashed. No system is perfectly secure. If we learn of a breach that affects you, we will tell you as the law requires.
Atomics is for people 13 and older. If you are under 18, you need permission from a parent or guardian, or from your school if it gave you your account. We treat everyone under 18 the same way we treat everyone else: we do not sell their data, show them ads, or build profiles of them for advertising.
We do not knowingly collect data from children under 13. If we learn that we have, we will delete it. If you believe a child under 13 has given us personal data, email us and we will delete it.
When a school, district or other organization gives you your Atomics account, it manages that account and decides how it is used. For those accounts:
If we change this policy, we will update the date at the top. For material changes, we will also tell you by email or in Atomics before they take effect.
Firebrand Developments LLC, 150 Mercer St, Unit 1084, Hightstown, New Jersey 08520, USA.
support@atomics.app