Privacy notice
This is the short, factual version. Provider identification is published at /company; the terms and the refund policy are at /terms. Broader launch marketing follows them.
What we collect, and why
- Visit counting. When you load the page, our application records a visit event: a timestamp, a coarse traffic source (for example “direct” or a platform name), and a pseudonym - a one-way code derived from your connection with a key that changes every day. We do not intentionally store raw IP addresses, browser identification strings, or full referrer URLs in the application database; the pseudonym cannot be linked across days. Purpose: counting real visits and filtering out automated traffic, which is the entire point of this page. Legal basis: legitimate interest, GDPR art. 6(1)(f) - honest, bot-filtered audience measurement that writes nothing to your device.
- The one-question select. If you answer “what would you actually be buying?”, we store the answer you picked and the same daily pseudonym. No name, no email, no profile. Legal basis: legitimate interest, art. 6(1)(f).
- Email sign-up. If you join the launch list, we store your email address and the time you joined. We use it to send one launch announcement and nothing else. We do not buy, sell, rent, or enrich email lists. Legal basis: your consent, art. 6(1)(a), which you can withdraw at any time - see Erasure below.
- Reports about a listing. If you send a notice through /report, we store what you sent and our decision on it, so the notice can be answered and the decision published in the removal log. Legal basis: legal obligation, art. 6(1)(c), under the Digital Services Act.
- The click ledger. Outbound clicks are counted server-side against the same daily pseudonym, and only per-hour totals per listing are ever published - no pseudonym, no referrer and no destination enters a published figure. Legal basis: legitimate interest, art. 6(1)(f); the published figures carry no personal data. How the counting works is set out on the methodology page.
What we do not do
- No cookies, no localStorage, no fingerprinting for reading or browsing - nothing is written to or read from your device. The one exception is signing in: it sets a session cookie (and, during a GitHub sign-in, a short-lived state cookie), used only to keep you signed in and never for tracking. Signing out clears it.
- No third-party analytics, no advertising pixels, no social widgets. Fonts are served from this domain.
- No payment data on our servers: payments are processed by Stripe, and card details never touch this site.
Where it is stored
Data is stored with Cloudflare, Inc. (our hosting and edge provider), in their distributed infrastructure. Access is limited to the site operator.
Retention
Visit events and select answers are kept until the launch-decision read is complete, then reduced to aggregate totals. The email list is kept until launch plus a reasonable follow-up window, or until you ask to be removed - whichever comes first.
Erasure and contact
To have your email removed, or to ask anything about this notice, write to [email protected]. Removal requests are honored without conditions.
Operator
This site is operated by OPTIMUMTECH FUSION SRL, which is the data controller for the processing described on this page. The full provider identification block (registered entity, address, registration number) is published at /company.