Privacy Policy

Last updated:

GDPR Compliant
CCPA Compliant
1. Information We Collect

Waitlist Information

When you join our waitlist, we collect:

  • Email address (required)
  • Name (optional)
  • Timestamp of signup

We do not store your IP address. We only receive coarse region information through our hosting provider so we can show the right consent options (for example, GDPR prompts in the EU), and we discard that information after the consent decision.

Technical Information

We automatically collect certain technical information:

  • Browser type and version
  • Device information
  • Pages visited on our website
  • Referral source
2. How We Use Your Information

We use your information solely for the following purposes:

  • To notify you when Flashletter becomes available
  • To send service or operational updates about our product development and waitlist status
  • To send additional marketing updates, tips, or promotions—but only if you have explicitly opted in. Every marketing message includes an unsubscribe link so you can withdraw consent at any time.
  • To improve our website and services
  • To prevent fraud and ensure security
  • To comply with legal obligations

We honor the selections you make in the waitlist form. If you do not opt in to marketing communications, we will not send them.

3. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on:

  • Consent: You have given clear consent for us to process your personal data for the specific purpose of joining our waitlist and, where selected, to receive optional marketing communications
  • Legitimate Interest: We have a legitimate interest in improving our services and preventing fraud
4. Your Rights

GDPR Rights (EU Residents)

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time

You can unsubscribe at any time using the link provided in our emails or by contacting us directly.

CCPA Rights (California Residents)

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of the sale of personal information
  • Right to non-discrimination for exercising privacy rights
5. Data Sharing and Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • With your explicit consent
  • To comply with legal obligations
  • To protect our rights and prevent fraud
  • With service providers who assist us in operating our website (under strict data protection agreements)

In particular, we rely on the following processors to deliver the waitlist experience:

  • Supabase: Cloud database and auth provider we use to store waitlist submissions and related metadata.
  • Sentry: Error monitoring service that helps us diagnose and fix issues. Sentry receives technical error details and may include the email address you entered if an error occurs during signup.

These providers only process data on our behalf and in accordance with their data protection addenda. We regularly review them to ensure they maintain appropriate safeguards.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security assessments.

7. Data Retention

We retain your waitlist information until you request its deletion or until it's no longer necessary for the purposes outlined in this policy. You can request deletion at any time by contacting us.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

We host our core waitlist data in Supabase's EU region and use Sentry's EU data residency option for error monitoring. They commit to appropriate transfer safeguards. You can review their individual data protection terms via Supabase's and Sentry's privacy policies.

9. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. We encourage you to review this privacy policy periodically.

11. Contact Information

If you have any questions about this privacy policy or wish to exercise your rights, please contact us:

Email: yakubmurcek@gmail.com

Data Protection Officer: Jakub Murcek

IČO: 08294593

Quick Actions: Unsubscribe from waitlist