What this site keeps about you, and for how long.
Written so you can check it. If any sentence here stops being true, the site is wrong, not you.
Right now there is no access form on the site, so nothing below is collected yet. This page says what the form will keep once it exists.
When you ask for alpha access, we collect your name, your email address, and an optional one-line note — nothing else. This site sets no cookies, runs no analytics, and loads no third-party code.
Your details go to one database we control on Cloudflare. We send you one confirmation email through our email provider, which keeps its own delivery logs for that message; if the first email fails you may get one more when you try again. If you don’t confirm within seven days, the record is deleted automatically — by a daily job, and again the next time anyone uses the site. That email also contains a personal link that deletes your record: open it, press one button, and it’s gone. No reply, no account. We delete everything after twelve months anyway.
Our server logs record that a request happened and whether it succeeded. They never contain your email address, your name, or your note. One address gets one confirmation email per day at most.
We can’t promise no system is ever breached. We can promise we hold as little about you as the request allows, for as short a time as we can, and that you can make us forget you in one click.
- Collected
- name · email · optional note
- Where
- one Cloudflare D1 database; the confirmation email passes through our email provider
- How long
- 7 days unconfirmed · 12 months confirmed · sooner if you click delete
- Cookies, analytics, third-party scripts
- none
- Bot defence
- a hidden field, a single-use signed form token, one email per address per day, and per-IP rate limits at the edge — no third-party challenge widget, no challenge cookies
Wording pending owner approval (CP3). Verified against the release checklist before launch; the checklist and evidence are kept in the repository.