Back to the start page

Privacy Policy

This site does one thing with personal data: it collects an email address so it can tell you once when the app is out. This page explains exactly what that involves.

Last updated:

1. Who is responsible

The controller for the processing described here, within the meaning of Art. 4 (7) GDPR, is:

2. What is collected

If you sign up for the waitlist, the following is stored:

Nothing else is asked for and nothing else is stored. There is no name field, no account, and no profile.

  • Your email address.
  • The date and time you submitted it.
  • The date and time you confirmed it, if you did.

3. Server logs

Like any website, this one cannot be delivered without your device talking to a server. The hosting provider and the signup endpoint record technical data for that purpose — IP address, time of request, the page requested, and the browser identification your device sends. This data is used to deliver the page and to defend against abuse, on the basis of a legitimate interest in operating the site securely (Art. 6 (1) (f) GDPR). It is not combined with your waitlist entry and is not used to identify you.

4. Why, and on what legal basis

Your email address is processed for exactly one purpose: to send you a confirmation email now, and a single announcement when the app is released.

The legal basis is your consent under Art. 6 (1) (a) GDPR, given when you submit the form and confirm it by email. Consent is voluntary — nothing on this site depends on giving it.

5. The confirmation email (double opt-in)

After you submit your address, you receive one email with a confirmation link. That link opens a page with a button, and your entry only counts as a subscription once you press it — merely opening the link changes nothing, so a mail scanner following links in the background cannot subscribe you. This is a legal requirement in Austria (§ 107 TKG 2021) and it also protects you: it means nobody else can put your address on this list.

If you never confirm, no announcement is ever sent to you, and the unconfirmed entry is deleted as described in section 7.

6. Who else processes the data

The following service providers act as processors under Art. 28 GDPR. They process the data only on instruction and only for the purposes described above:

These providers may process data on servers outside the EU. Where that happens, the transfer is covered by the European Commission’s Standard Contractual Clauses.

  • Supabase — database and the server function that receives the signup.
  • Resend — delivery of the confirmation email and the launch email.
  • Cloudflare Pages — hosting and delivery of this website.

7. How long it is kept

Confirmed entries are kept until the launch announcement has been sent, and are deleted no later than three months afterwards.

Unconfirmed entries are deleted after 30 days, because without confirmation there is no consent to rely on.

If you withdraw your consent, your address is deleted without delay.

8. Your rights

Under the GDPR you have the right to request access to the data held about you (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to have its processing restricted (Art. 18), to receive it in a portable format (Art. 20), and to object to processing (Art. 21).

You can withdraw your consent at any time with effect for the future. Withdrawing does not affect the lawfulness of processing carried out before you withdrew.

To exercise any of these rights, write to [email protected]. No particular form is needed — one sentence is enough.

9. How to get off the list

Send an email to [email protected] asking to be removed, and the entry is deleted. You do not have to give a reason. Every email sent from this waitlist also carries an unsubscribe option.

10. Complaints

If you believe the processing of your data breaches the GDPR, you have the right to complain to a supervisory authority. The competent authority in Austria is the Datenschutzbehörde.

dsb.gv.at

11. Cookies, analytics and tracking

This site sets no cookies, uses no analytics, and embeds no tracking pixels or social media widgets. No profile of your visit is built and nothing about your visit is shared with advertising networks.

The typeface used here is served from this site’s own server, not from a font CDN, so loading this page does not disclose your IP address to a third party.

12. Changes to this policy

If the site changes in a way that affects how data is handled, this page is updated and the date above changes with it.