A small list.
A little privacy.
Waitlist privacy · 9 September 2026
This notice explains how we handle your information when you join the Tech Grails launch waitlist.
Who is responsible
The remaining operator and contact details are being finalized and will be listed here before signups open.
What you’re signing up for
When you join, we collect your email address, signup time, signup source, the version of the consent you gave, and confirmation and email-delivery timestamps. We first send a confirmation link. Only after you confirm do we include you in the launch mailing list. We use your email address to let you know when Tech Grails is ready. Joining does not create a collector account or subscribe you to a general newsletter.
The basis for this is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time without affecting processing that happened before withdrawal.
Where the data goes
Waitlist records are stored in Supabase on our behalf. Resend delivers confirmation and launch emails and receives your email address, message content and delivery information, including the links needed to confirm or remove your signup. Vercel serves this website and processes requests, which can include your IP address and technical request information in its infrastructure logs.
Details of Supabase’s processing and international transfer safeguards are set out in its data-processing terms. Resend’s processing terms are available in its data processing addendum.
For spam prevention, the application stores a short-lived rate-limit code and an attempt counter. Where our hosting provider supplies a trusted connection address, the code is derived from your IP address with a secret key and changes each hour. We never store the raw IP address in the application’s rate-limit table. Records older than two hours are removed on the next signup attempt. This limited abuse prevention is based on our legitimate interest in keeping the signup service available (Article 6(1)(f) GDPR).
Email-open and click tracking are disabled in our Resend configuration before sending is enabled. We do not sell the list. There are no analytics, advertising pixels, third-party fonts, or tracking cookies on this page.
Removal and retention
The removal link in your confirmation email lets you leave the list. You can also withdraw your consent or request access, correction, deletion, restriction, or a portable copy of your data. The privacy contact email for these requests will be listed above before signups open. You can also object to processing based on legitimate interest and complain to your local data protection authority.
Confirmation links expire after 24 hours. Unconfirmed requests are eligible for deletion after seven days. Confirmed requests are eligible for deletion after 365 days, or are removed sooner when you withdraw or after the launch notification is sent. Expired records are cleaned up on subsequent signup requests and through operator maintenance. Resend retains message and delivery records under its service retention settings. Any future newsletter or account needs its own signup.