Privacy notice — waitlist

Who is responsible

[Founder: legal name or company name], [Founder: postal address], [Founder: country of establishment, e.g. the Netherlands], is responsible for this website and the waitlist (the "controller"). Contact: [Founder: privacy contact email at purpace.app].

What we collect when you join

Only what we need to send you the launch email and to prove you asked for it:

• your email address;
• whether you have confirmed it (double opt-in), and when;
• the version of the consent text you saw, and the page language;
• where you came from, as one coarse label (for example "instagram" or "direct");
• a pseudonymous fingerprint of your IP address (a keyed hash — we never store the IP itself), used to stop abuse and as part of the consent record;
• a coarse browser family (for example "Safari iOS"), never the full browser string.

Why, and on what legal basis

We use your email address only to confirm your sign-up and to tell you when PurPace launches — with an occasional early update before launch. The legal basis is your consent (Article 6(1)(a) GDPR), which you give by submitting the form and confirming the link in our email.

We use the IP fingerprint and rate limits to protect the waitlist from abuse; the legal basis is our legitimate interest in keeping the service secure (Article 6(1)(f) GDPR).

How long we keep it

If you never confirm, your address is deleted automatically after 30 days. IP fingerprints are removed after 30 days.

If you confirm, we keep your address until PurPace has launched and we have sent the launch email, or until you unsubscribe — whichever comes first — and then delete it or, with your agreement, keep you informed. [Founder: confirm the retention period after launch.]

When you unsubscribe, we stop emailing you immediately. We keep a minimal record that you unsubscribed so we never email you by mistake. [Founder/legal: confirm.]

Who processes data for us

We use a small number of service providers, each bound by a data processing agreement:

• Vercel Inc. — hosts the website (servers process technical request data such as IP addresses to deliver pages and protect against attacks).
• Supabase — stores the waitlist in a database located in the EU. [Founder: confirm region when the project is created.]
• Resend — sends the confirmation and launch emails.
• Cloudflare — Turnstile checks that a real person is submitting the form, without puzzles. See Cloudflare’s Turnstile privacy addendum.

International transfers

Some providers are based in the United States. Where data leaves the EU/EEA, transfers rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses. [Legal: verify per provider.]

Cookies and tracking

This website does not use advertising or tracking cookies, and it stores nothing on your device to follow you. We do not use Meta, Google or other advertising pixels.

If we enable privacy-friendly visit statistics (Vercel Web Analytics), they work without cookies and count visits in aggregate. [Founder/legal: confirm before enabling.]

Cloudflare Turnstile may process technical signals from your browser to tell people and bots apart.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it; you can withdraw your consent at any time with the unsubscribe link in every email, or by writing to [Founder: privacy contact email at purpace.app]. Withdrawing consent does not affect what happened before.

You can also complain to [Founder: the competent data protection authority, e.g. the Autoriteit Persoonsgegevens (NL)].

Children

The waitlist is intended for people aged 16 or older. [Founder/legal: confirm the minimum age.]

Changes

If we change this notice, we will update the date below. Significant changes will be explained before they apply to you.