EPR Atlas / Privacy Policy

Privacy Policy

Effective date: October 9, 2026. Last revised: October 22, 2026.

This policy explains what information EPRAtlas.com (the "Site") collects, how it is used, and who it is shared with. The Site is operated by Hartter Advisory, LLC ("Hartter Advisory", "we", "us"). Questions about this policy can be sent to info@hartteradvisory.com. Use of the Site is also governed by the Terms of Use.

1. Information you give us

The Site's tools and downloads need a free account, described in section 6, and the Site also has feedback, contact, and survey forms. Depending on the form, these collect your name, email address, company, role or job function, the tool or download you requested, the options you selected, and any message, feedback, or survey answers you type in. The contact form records whether you ticked the box asking for EPR Atlas updates, and the reader survey records whether you ticked the boxes asking for a call or for information about EPR software.

If you email us, we keep your email and our reply.

2. Ask Atlas

When you ask Ask Atlas a question, the text of that question is sent to Anthropic, which provides the AI model that writes the answer. Do not include confidential or personal information in a question. We do not keep a stored record of the questions you ask. To limit how many questions can be asked, the Site counts requests by IP address in temporary memory, and our hosting logs may record an IP address when that limit is reached.

3. Information collected automatically

The Site does not use advertising cookies.

4. How we use information

5. Who we share information with

We do not sell personal information.

EPR software information. If you tick the box asking for information about software that automates EPR data and fee reporting, we share your name, email address, company, and role with gCurv Technologies, the maker of Packgine, so that it can contact you about its software. Hartter Advisory has a referral relationship with gCurv Technologies. If you do not tick that box, your information is not shared with gCurv Technologies.

Service providers. We use companies that process information on our behalf to run the Site: Netlify (hosting, form storage, accounts, subscription status, and connection records), Google (analytics, and sign-in if you choose it), Anthropic (the AI model behind Ask Atlas), Stripe (payments and subscription status), and our email provider. They use the information to provide their services to us.

Legal reasons. We may disclose information when required by law or to protect our rights.

6. Accounts and payments

Every tool and download on the Site requires a free account: Ask Atlas, the Scope Screener, both fee calculators, the Design for Recyclability Rater, the supplier checklist, the state comparison CSV, and the one-page guides. The pages themselves stay free to read without an account. When you create one, we collect your name, email address, company, and title, and the choices you make in the updates and software boxes. You can sign up with an email address and password, or sign in with Google, in which case Google shares your name and email address with us. Accounts are run by our hosting provider, Netlify, which holds your password in protected form; we never see it. To apply the daily question limit, we record how many questions each account asks each day. The details you give at sign-up are handled the same way as a form submission, including the sharing described in section 5 if you tick the software box.

Tool use on your account. When you use a tool or download a file while signed in, we record on your account which tools and downloads you used, the first and last time you used each one, and a count for each action, such as a calculation, a rating, or a download. The record does not include what you enter into a tool, such as product, packaging, or sales data, or the text of your Ask Atlas questions. We use this record to understand which tools are used and how often. If you ticked the box asking for EPR Atlas updates or the box asking for information about EPR software, we may also use it to decide what to send you. The record is held with your account in Netlify Identity. Hartter Advisory, which runs the Site, can view it and download it as a report, and your own browser receives it as part of your signed-in session. It is not shared with gCurv Technologies or anyone else.

Copies of downloaded files. Files you download while signed in (the one-page guides and the state comparison CSV) carry a short code made from your email address, so a copy that turns up elsewhere can be traced to the account that downloaded it. The code does not contain your email address, and we do not send it to anyone.

Paid subscriptions. Payments for paid plans are processed by Stripe, and we do not receive or store your full card number. Stripe tells us the status of your subscription, such as trial, active, or canceled, along with its plan and its renewal or end date. We store that status, with the Stripe customer and subscription IDs, under the email address on the subscription so the Site can give you the access you paid for. If we give you access directly, such as for a pilot, we store that grant with your email address in the same way.

The EPR Atlas Stack. When you connect an AI assistant to the EPR Atlas Stack, you sign in with your EPR Atlas account and allow the connection. The connection record holds your email address, an ID for the assistant, and the times the connection began and expires. Our hosting logs record the name the assistant gives itself, its return addresses, and the name and version it reports when it connects, along with each approval, renewal, and refused attempt with the assistant's ID and the domain of your email address. To limit connection requests, we count them per day by a coded form of your network's IP address and delete those counts after about two days.

Requests from your assistant. Each request is recorded with its time, the tool used, and the state it asked about, under a coded label made from your email address, and requests are counted per day against a daily limit. The search words and filters the assistant sends to the EPR Atlas tools are used to answer the request and are not stored beyond the state. Your questions to the assistant never reach the Site, because the company that provides the assistant handles them under its own terms.

7. How long we keep information

We keep form submissions and emails for as long as they are useful for responding to you, sending updates you asked for, or keeping a record of our business relationship, or until you ask us to delete them. Analytics data is kept according to the Site's Google Analytics settings. The record of tool use on an account is kept for as long as the account exists and is deleted with it, and when an account is deleted at your request, copies of its record in usage reports downloaded by Hartter Advisory are deleted too.

Subscription status is kept while the subscription is active and for as long as we need it for our business and tax records. A connection to the EPR Atlas Stack expires 30 days after the assistant last renewed it, and no later than 90 days after you signed in. Expired connection records are deleted by a daily cleanup. Daily request counts are deleted after about 90 days. Request logs are kept by our hosting provider for its standard log period.

8. Your choices

9. Children

The Site is meant for businesses and is not directed to children under 13. We do not knowingly collect information from children.

10. Changes to this policy

We may update this policy. The Last revised date at the top of this page shows when it last changed.

11. Contact

Hartter Advisory, LLC: info@hartteradvisory.com