← Tech Grails

A small list.
A little privacy.

Waitlist privacy · 10 September 2026

This notice explains how we handle your information when you join the Tech Grails launch waitlist.

Who is responsible

Lara-Selin Avci operates Tech Grails.

Contact: laraselin.avci@gmail.com.

What you’re signing up for

When you join, we collect your email address, signup time, signup source, the version of the consent you gave, and confirmation and email-delivery timestamps. We save your email when you submit the form, even if you do not receive or complete a confirmation email. Email verification is recorded separately. Where confirmation is available, we send a link; only verified addresses are included in the launch mailing list. We use your email address to let you know when Tech Grails is ready. Joining does not create a collector account or subscribe you to a general newsletter.

The basis for this is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time without affecting processing that happened before withdrawal.

Where the data goes

Waitlist records are stored in Supabase on our behalf. Resend delivers confirmation and launch emails and receives your email address, message content and delivery information, including the links needed to confirm or remove your signup. Vercel serves this website and processes requests, which can include your IP address and technical request information in its infrastructure logs.

Details of Supabase’s processing and international transfer safeguards are set out in its data-processing terms. Resend’s processing terms are available in its data processing addendum.

For spam prevention, the application stores a short-lived rate-limit code and an attempt counter. Where our hosting provider supplies a trusted connection address, the code is derived from your IP address with a secret key and changes each hour. We never store the raw IP address in the application’s rate-limit table. Records older than two hours are removed on the next signup attempt. This limited abuse prevention is based on our legitimate interest in keeping the signup service available (Article 6(1)(f) GDPR).

Email-open and click tracking are disabled in our Resend configuration before sending is enabled. We do not sell the list. There are no analytics, advertising pixels, third-party fonts, or tracking cookies on this page.

Removal and retention

If you receive a confirmation email, its removal link lets you leave the list. You can also contact us to remove a signup without confirming it. You can also withdraw your consent or request access, correction, deletion, restriction, or a portable copy of your data. Email laraselin.avci@gmail.com to make a request. You can also object to processing based on legitimate interest and complain to your local data protection authority.

Confirmation links expire after 24 hours. Saved requests, whether verified or not, are eligible for deletion after 365 days, or are removed sooner when you withdraw or after the launch notification is sent. Expired records are cleaned up on subsequent signup requests and through operator maintenance. Resend retains message and delivery records under its service retention settings. Any future newsletter or account needs its own signup.

Operator details