Privacy

When you join, we create one record in our database, consisting of:

• Your email address, so we can tell you when we launch.
• The date and time you joined the waitlist.
• The line your browser sends automatically to identify itself: usually its name, version, and operating system, and in some apps the device. These help us spot bots.
• A scrambled version of your IP address, never the address itself. We use it to limit sign-ups from any one connection, to stop abuse of the service. We scramble it with a secret key kept separately on our server, and without that key no one can link it back to your address.

We don’t ask for your name, company, or location when you join. After launch, we build your profile with you: you tell us what matters, and we suggest professional details from public sources for you to confirm.

Joining is optional. We only need your email address to tell you when we launch. We make no automated decisions about you: nothing that affects you is decided by a system alone.

Signing up is your consent to hear from us about the launch, the founding-member offer included. You can withdraw it any time by emailing us. We then stop using your details. This does not change anything we did with your consent before.

We keep the two anti-bot details because we have a legitimate interest in keeping bots and fake sign-ups off the list. The same interest covers the short-lived logs our host keeps to run the site securely.

We use three service providers. Vercel hosts the site and handles your sign-up in Frankfurt, and Supabase stores the list there. Resend sends our emails, with no open or click tracking. All three act only on our instructions.

All three are US companies, so some data may be accessible from the United States. When we email you, Resend keeps your address and its delivery records there. The EU’s standard contractual clauses in their data processing agreements cover these transfers; email us for a copy. Like any web host, Vercel also sees your IP address when you visit and keeps it in its own logs.

We keep your record until launch, and for up to 12 months after. Then we delete it, unless you have become a customer. If our plans change, we delete it sooner.

No cookies, no analytics, no ad trackers, no session recording. We never sell, rent, or share the list for anyone else’s use: only the three service providers named above handle it, on our instructions. Our fonts and images load from our own site, not from outside services, so no company beyond our host learns you visited.

Email hello@scrollfield.com and we delete your record, including your address at our email provider, within five business days and confirm it. No reason needed. Copies in our providers’ delivery logs and backups expire on their own within 30 days.

You can also ask for a copy of what we hold, or have it corrected. You can limit or object to how we use it, or receive it in a portable format. If you are ever unhappy with how we handle your data, you can take it up with Estonia’s data protection authority, Andmekaitse Inspektsioon, or with the one where you live or work.