Privacy

What we collect

When you join the waitlist, we store:

• Your email address — what you typed in the box.
• The date and time you joined.
• A source tag, if you arrived through a campaign link we set up. This records which link you came from, not who you are.

That is the whole list. No name, no phone number, no address, no payment details, no date of birth.

What we don't do

• No cookies. The page sets none, so there's no consent banner to click.
• No analytics or tracking pixels. No Google Analytics, no Meta pixel, no session recording, no fingerprinting.
• No third-party fonts or scripts. Everything the page loads is served from this domain. Loading fonts from a third-party CDN would hand your IP address to that company before you'd done anything; we host them ourselves so that never happens.
• No selling, renting, or sharing your email. Not with advertisers, not with data brokers, not with "partners". If Klatsch is ever acquired, we'll tell you before your address changes hands, and you'll be able to delete it first.

Your IP address

When you submit the form, our server briefly holds your IP address in memory to count how many times that address has submitted in the last ten minutes. This is how we stop bots flooding the list. It is never written to a database, never logged to a file, and is discarded automatically. We don't store it alongside your email or use it to identify you.

Why we have your email

To tell you when Klatsch opens, and to send you an invitation when your turn comes. That's the only reason we asked.

We won't send you marketing about anything else, we won't add you to a newsletter, and we won't email you on behalf of someone else. Every email we send will have a one-click unsubscribe link.

Who else can see it

We use a small number of service providers to run this page. They process data on our instructions and are not permitted to use it for their own purposes:

• Supabase — the database the list is stored in.
• Railway — runs the server that receives the form.
• Netlify — serves this page.

Nobody else. If we later add an email delivery provider to send the launch announcement, we'll name it here before we use it.

How long we keep it

Until Klatsch launches and you've had your invitation, or until you ask us to delete it — whichever comes first. If the project is abandoned, the list is deleted and we'll email you to say so.

Your choices

Email support@klatsch.shop and we will, within 30 days:

• Tell you whether your address is on the list.
• Send you a copy of everything we hold about you.
• Correct it.
• Delete it, permanently.

You don't need to give a reason and we won't ask for one. Depending on where you live you may have these rights by law — under the GDPR, the CCPA, the Texas Data Privacy and Security Act, or similar. We extend them to everyone regardless.

If you're in the UK or EU: our lawful basis is your consent, which you gave by submitting the form, and which you can withdraw at any time by asking us to delete your address. You also have the right to complain to your local data protection authority.

Security

The list is held in a database configured so that our own application server cannot read it — the server can add an address and count how many there are, and nothing else. Reading the list requires separate credentials that only the operator holds. This means a compromise of the public-facing server does not expose the list.

No system is perfect. If we ever discover that the list has been exposed, we will email everyone on it and say what happened.

Children

The waitlist isn't intended for anyone under 16. If you believe a child has submitted their address, email us and we'll remove it.

Changes

If we change this in a way that affects what we do with your email, we'll email you before it takes effect. Minor corrections will just be dated here.

Contact

Klatsch — support@klatsch.shop