Privacy
This is a prelaunch privacy notice. It must be replaced by a final policy aligned with the actual analytics, email, checkout and fulfillment tooling before sales open.
What we collect
- Support email addresses and messages submitted via the contact form, retained for support continuity and abuse prevention.
- Newsletter email address, consent version, confirmation timestamps and opaque hash-only confirmation/unsubscribe grants if you subscribe. Drop Alerts activate only after you use the one-time confirmation link sent to that address.
- Short-lived network security metadata used to protect forms and APIs. The edge-supplied connecting address is transformed into a pseudonymous anti-abuse identifier before the application writes a rate-limit counter to its database; this control does not store the raw address in that database. The pseudonymous identifier may still be personal data.
- If checkout is activated, a private order-access proof protects status, tracking and document links. The application stores only its cryptographic hash with the order; the raw proof is delivered in the secure link fragment and is not accepted in a server URL query.
- Checkout information only if checkout is activated in the future.
Why we collect it
- Provide customer support.
- Send product updates only after you confirm the double opt-in email.
- Protect the service against automated abuse and excessive requests.
- Process payments and fulfill orders only after checkout is activated.
Data retention
Unconfirmed newsletter requests expire after 24 hours and are removed during routine cleanup. Confirmed consent records are retained only while Drop Alerts remain active or as needed to demonstrate consent. Other data is kept only as long as needed for orders, legal obligations, and support. Application rate-limit counters are designed for short-lived security use; the current technical retention target is two days and remains subject to final controller and legal approval before sales open.
Your rights
Depending on your region (EU/US), you may have rights to access, correct, or delete your personal data. You may withdraw newsletter consent at any time through the private unsubscribe link included in Drop Alert emails or by contacting support. The automated link revokes future marketing messages without affecting transactional order or support communications.
Contact
For privacy requests, contact support at /contact/.
This page is general information and not formal legal advice.