Privacy policy

This policy explains what Staunch collects when you join the waitlist on staunch.sh, why, and what you can do about it.

Who is responsible

Staunch is published by Mael Duret, who is the data controller for the waitlist. For any question about your data, write to hello@staunch.sh. No data protection officer has been appointed.

What we collect

• Your email address, when you join the waitlist.
• A record of your consent: the version of the consent text you agreed to, when you joined and when you confirmed.
• A security check: when you submit the form, Cloudflare Turnstile checks that you are not a bot, using technical signals from your browser and your IP address. Your IP address is also used to limit repeated requests. Neither is stored in the waitlist.
• Anonymous visit statistics: Cloudflare Web Analytics counts page views, the referring site, the browser type and the visitor’s country, so we know how many people visit and which pages help. It sets no cookies, stores nothing on your device and doesn’t track you across sites. The personal links in our emails are never recorded.
• Technical logs kept by our hosting provider for security and troubleshooting, such as IP address, request time and the page requested. They are kept for 7 days.

Your email address is required to join the waitlist. Without it, we can’t sign you up or tell you when Staunch opens.

This website sets no cookies of its own and loads no advertising or tracking scripts. The only measurement is the anonymous, cookieless visit statistics described above. Turnstile only loads when you start using the waitlist form. Our emails contain no tracking pixels and we don’t track opens or clicks.

Why we use it

To confirm your signup, tell you when early access opens, send news about Staunch’s launch and apply the founding member discount. The legal basis is your consent (GDPR Art. 6(1)(a)), which you give by joining and confirming your address.

If you unsubscribe, we keep your address on a suppression list, only so that we never email you again. The legal basis for this is our legitimate interest in respecting your choice (GDPR Art. 6(1)(f)). You can ask us to delete it completely by writing to hello@staunch.sh.

Visit statistics are used only to measure this website’s audience. The legal basis is our legitimate interest in understanding how the site is used (GDPR Art. 6(1)(f)). They set no cookies and only produce anonymous statistics, so they don’t require your consent.

We don’t use your data for automated decision-making or profiling.

Double opt-in

After you join, we send one email with a confirmation link, valid for 7 days. If you don’t confirm, your address is deleted automatically after 7 days.

How long we keep it

While you are on the waitlist, until you unsubscribe. When Staunch launches, we will invite you to create an account. If you don’t, we delete your address within 12 months of launch.

Unsubscribing stops all emails immediately. We then keep your address marked as unsubscribed, only so that we never email you again. If you want it deleted completely, write to hello@staunch.sh.

Detailed visit statistics are kept by Cloudflare for 7 days, then only as aggregated figures, available to us for 6 months.

Who processes it

We never sell or share your data. Our only provider is Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, United States), acting as our processor:

Waitlist storage

Cloudflare D1, EU jurisdiction: the waitlist is stored in the European Union

Email delivery

Cloudflare Email Service

Bot protection

Cloudflare Turnstile

Visit statistics

Cloudflare Web Analytics

Website hosting

Cloudflare Workers

Transfers outside the European Union

Cloudflare, Inc. is a US company. The waitlist itself is stored in the European Union, but web requests, visit statistics, the security check and emails go through Cloudflare’s global network and may be processed outside the EU, including in the United States.

These transfers rely on Cloudflare’s certification under the EU-U.S. Data Privacy Framework. Cloudflare’s Data Processing Addendum also includes the European Commission’s Standard Contractual Clauses, which apply if that framework stops being valid.

Your rights

You can access, correct or delete your data, ask us to restrict its use, receive it in a portable format, object to its use, and withdraw your consent at any time. Withdrawing consent doesn’t affect what was done before.

Every email has an unsubscribe link. For anything else, write to hello@staunch.sh. We answer within one month.

If you think your data is not handled correctly, you can lodge a complaint with your data protection authority. In France, that is the CNIL (cnil.fr).

Changes

If this policy changes in a way that matters, we will tell you by email before it applies.