Your privacy, in plain words.

This text is being reviewed by a lawyer before launch.

What we collect, and why

Reading the site creates short-lived server logs: your IP address, browser type, the page you asked for and the time. They are used to prevent abuse and fix faults, and are deleted within 30 days. The forms collect only what follows.

Waitlist (/community, and the “Which would you like to see first?” vote when an email is given)

Email; optional first name; optional interest (one of the four spaces)

Why: To tell you when the community opens

Kept for: Unconfirmed: deleted after 30 days. Confirmed: until you unsubscribe or ask us to delete it. Unsubscribing deletes the address

Vote (“Which would you like to see first?”)

The choice (01 to 04) and the time; no identifier, no cookie

Why: To learn what to build first

Kept for: Counts only

Contact (/contact)

Email; optional name; the reason chosen from the list; optional page address; your message

Why: To reply to you

Kept for: 12 months, then deleted by a scheduled job

Ask (/ask)

Question text, anonymous by default; optional tick box consenting to a public answer; optional email, used only to tell you when it is answered

Why: To answer, publicly only when you ticked the box

Kept for: 12 months, email included; a published answer keeps only the edited question

“Was this helpful?”

A yes or no per article; no identifier, no cookie

Why: To learn which pages help

Kept for: Counts only

Abuse limit

A salted one-way hash of your IP address and a count of posts; never the IP itself

Why: To stop one source sending more than 10 forms an hour

Kept for: 24 hours, then deleted by a scheduled job

Request logs

IP address, user agent, path including any link code, timestamp

Why: Abuse prevention and debugging

Kept for: We keep no separate copy. Cloudflare’s Workers Logs keep them for 3 days on our plan; never more than 30 days

Error reports (not yet active)

Stack traces and request metadata, personal fields scrubbed

Why: To find bugs

Kept for: Sentry’s default storage period

Analytics

Aggregated page views and referrers, no cookies

Why: To see which pages are read

Kept for: Aggregated only

Form data lives in Cloudflare D1. Turnstile protects the forms and “does not access, store, or transmit user communications, form entries, or other page inputs”. The widget runs in your browser, where Cloudflare reads the browser signals it needs for the check; our server sends Cloudflare only the widget’s one-time token, never your IP address or what you typed.

Email links: the confirmation link carries a random one-time code that works for 7 days; we store only a one-way hash of it. Unsubscribe links carry a random record number and a signed code; neither contains your email address.

We never ask for health details

There is no field for a diagnosis, medication, symptoms or history, and we do no profiling. If you volunteer health detail in a message, we use it only to answer you, never add it to a list, and delete it on the 12-month schedule or sooner if you ask. The public version of an Ask question removes anything that could identify a person or a place.

No tracking cookies, no consent banner

The site sets no analytics cookies and no tracking identifiers. Our analytics (Cloudflare Web Analytics) use no cookies or local storage and do not fingerprint you by IP address or browser. The bot check is strictly necessary and is not used to identify, profile or target anyone. Because we store nothing of that kind, there is nothing to ask consent for, and Help now is never behind a banner.

Who processes your data

• Cloudflare (hosting, D1, Turnstile, Web Analytics, logs) sees form submissions, request metadata and aggregated analytics; for Turnstile, the browser signals of the check, never form entries. It is “a Processor (or sub-Processor, as applicable)” under its data processing agreement, with EU Standard Contractual Clauses. D1 gets an apac location hint, which “does not guarantee that D1 runs in your preferred location”.
• Resend (transactional email: confirmations, acknowledgements) sees the recipient email, the first name or name you gave, and the email we send (including its links); never the text of your question or message. It is a processor; “primary processing operations take place in the United States”; it deletes customer data “within 90 days of the account termination”.
• Brevo (later) will send newsletter and waitlist mailings. It will see your email, first name, interest, and opens and clicks on our emails.
• Sentry (later, not yet active) will collect error reports with server-side scrubbing on, and with IP storage, cookie collection and the console integration switched off.

No processor may use this data for its own marketing. Nothing is sold. There are no advertising pixels.

Your rights in India

If you are in India, the Digital Personal Data Protection Act 2023 gives you the right to know what personal data we hold about you, to have it corrected or deleted, to raise a grievance with us, and to nominate someone to act for you. Write to privacy@aeeroba.example; we reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India once you have given us the chance to respond.

Your rights in the EU, the EEA and the UK

If you are in the EU, the EEA or the UK, you may access, correct, delete or restrict your personal data, object, take it with you, and withdraw consent at any time. Our basis for the waitlist is consent; for replying to a message it is our legitimate interest in answering you. Some providers process data in the United States under Standard Contractual Clauses. Write to privacy@aeeroba.example; we reply within one month. You may also complain to your local data protection authority.

Children and age

Anyone may read the site. Reading creates only the short-lived server logs described above. The forms and any future community are for people aged 18 and over. We track and target no one. If we learn that a person under 18 submitted a form, we delete it.

Questions and grievances

Privacy questions and grievances: privacy@aeeroba.example. We acknowledge within 7 days and resolve within 30. A Grievance Officer will be named here before launch. Postal address on request.

Say hello

Changes to this notice