Privacy Policy

The controller responsible for the processing of personal data on this website, within the meaning of the General Data Protection Regulation (GDPR), is:

This website is hosted by Railway Corp., San Francisco, CA, USA (see railway.app/legal/privacy). We have entered into a Data Processing Agreement (Art. 28 GDPR) with this provider. As Railway Corp. is based outside the EU/EEA, data transfers to the USA are safeguarded by Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

When you visit this website the hosting provider automatically collects server log data that your browser transmits. This includes:

• IP address of the requesting device
• Date and time of access
• URL requested
• Browser type, version, and operating system
• HTTP status code and amount of data transferred

Purpose and legal basis: Ensuring the technical operation and security of the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Log files are typically deleted automatically after a few days unless a security incident requires longer retention.

If you submit the waitlist form on this website, we collect and store the following data:

• Email address — provided directly by you
• Consent record — a flag confirming that the consent checkbox was ticked and the exact wording of the consent label shown at the time (required to demonstrate consent under Art. 7(1) GDPR)
• Date and time of registration — recorded automatically in UTC
• UTM marketing parameters — utm_source, utm_medium, utm_campaign, utm_content — only if present in the URL when you open the page (e.g. from a social media post or email link). These parameters identify which channel you arrived from. They are not personal data, but we disclose them for transparency.
• Referrer hostname — the domain name (e.g. twitter.com) of the page you visited immediately before arriving here, if your browser sends this information. We store only the hostname, never the full URL, to minimise data (Art. 5(1)(c) GDPR).

Purpose: To notify you when Renewal Radar early access opens, and to understand which marketing channels are most effective.

Legal basis: Art. 6(1)(a) GDPR — your freely given, specific, informed, and unambiguous consent via the checkbox on the registration form.

Storage: Data is stored in a database on the server of the hosting provider named above. We do not share it with any other third party.

Retention: We retain your email address and associated registration data until one of the following occurs: (a) you withdraw your consent, (b) the product launches and all waitlist members have been notified, or (c) we decide to discontinue the waitlist. We will not retain data beyond its purpose.

Withdrawal of consent (Art. 7(3) GDPR): You may withdraw your consent at any time with effect for the future by sending an email to joshuadealscout@gmail.com with the subject “Remove from waitlist”. We will delete your data without undue delay. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

This website sets no cookies of its own and uses no third-party analytics, tracking, or advertising tools (e.g. no Google Analytics, no Meta Pixel).

We operate a simple privacy-first page-view counter built into this website. When you load a page, your browser sends a request to our own server that records:

• The page path (e.g. /)
• Date and time of the visit

We do not store IP addresses, browser fingerprints, user agents, or any other identifying information. The counter is used solely to measure aggregate interest in the product (e.g. how many visitors sign up). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding product demand).

Technically necessary cookies may be set by the hosting provider during normal operations. Please refer to the hosting provider's own privacy policy for details.

With respect to the processing described in Section 3, you have the following rights:

• Withdrawal of consent (Art. 7(3) GDPR) — withdraw your consent to receive communications at any time, as described in Section 3 above.
• Access (Art. 15 GDPR) — request confirmation of whether we process personal data about you and obtain a copy.
• Rectification (Art. 16 GDPR) — have inaccurate data corrected.
• Erasure (Art. 17 GDPR) — request deletion of your data where no retention obligation applies. Where consent is the sole legal basis, erasure is generally available upon withdrawal.
• Restriction (Art. 18 GDPR) — request that processing be restricted in certain circumstances.
• Data portability (Art. 20 GDPR) — receive your data in a structured, machine-readable format.

To exercise any of these rights, contact us at joshuadealscout@gmail.com. We will respond within one month (Art. 12(3) GDPR).

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that our processing of your personal data infringes the GDPR (Art. 77 GDPR).

The supervisory authority for the controller is the data protection authority of the German federal state of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, LDI NRW). A directory of all German state authorities is available at: www.datenschutz.de.