Privacy

When you submit your email through the waitlist form, we store:

• Your email — so we can contact you when StreamWhen launches.
• The source you came from (a URL parameter like ?source=... or UTM tag from an ad link) — so we know which channels are working.
• A salted SHA-256 hash of your IP address — used only to enforce rate limits (preventing spam signups). The original IP address is never stored or logged.
• Your browser's user-agent string — for diagnosing issues if you have trouble signing up.
• The timestamp of your signup.

That's the complete list. Nothing else is collected during signup.

• No analytics cookies or tracking pixels of our own (no Google Analytics, no Hotjar, no Plausible).
• No browser fingerprinting.
• No location data beyond what your IP would imply (and that's hashed).
• No data from your visit on our database if you don't sign up — viewing the landing page leaves nothing in our records.

The one third-party script we do load is Google's ad-conversion tag — disclosed in full below.

When we run paid ad campaigns on Google, we load Google's tag (gtag.js) on the landing page. This is so Google can tell us which ads led to waitlist signups — basic attribution data we use to decide where to spend.

What this means concretely:

• If you arrive on the site, Google may set a _gcl_au cookie on your browser. It's a Google Ads identifier used to link your visit back to an ad click.
• Your visit (page URL, referrer, basic device info) is reported to Google by their script.
• If you sign up to the waitlist, we may also fire a conversion event so Google knows the ad worked. This event includes nothing about you personally beyond the cookie identifier.
• This data is governed by Google's own privacy policy (policies.google.com/privacy), not ours.

You can opt out of Google's ad personalisation at adssettings.google.com or block third-party cookies / use a tracker-blocker (e.g., uBlock Origin) — that prevents the tag from loading entirely.

We don't use Google Analytics, and we don't plan to. The ad conversion tag is the minimum we need to know whether ad spend works; if/when we stop running ads, the tag comes off.

• We email you when StreamWhen launches. One email at launch — no newsletter, no drip campaigns.
• We may share aggregate counts (“500 signups so far”) but never anything per-person.
• We never sell, share, rent, or trade your data. Not to advertisers. Not to data brokers. Not to anyone, ever.

A Postgres database on a server we operate, located in Germany. No third-party data processors, no managed cloud database, no cross-border transfers we don't control.

Until you ask us to delete it, or until we shut StreamWhen down (in which case the database is wiped). If we're still working on the product 12 months from now and haven't emailed you, we'll send you a check-in asking whether you still want to be on the list.

Email us (address below) and we'll delete your row within 7 days. No account, no password, no form to fill out — just say the word.

StreamWhen is not directed at children under 13, and we don't knowingly collect data from anyone in that group.

Under GDPR and UK GDPR, you have the right to access, correct, or delete the personal data we hold about you, and to object to its processing. Email us — we'll respond within the legal window (one month) but usually within a few days.

If we change anything material, we'll update the date at the top and post a note on the homepage. We won't quietly add tracking later. If we ever decide to add analytics or third-party services, you'll see it announced before it's live.

Privacy questions, deletion requests, or anything else: ftkzerocool@gmail.com