Privacy Policy

Last updated: 2026-06-26 · Consent version: 2026-06-v1

Who we are (data controller)

The controller of your personal data is [CONTROLLER NAME — e.g. Jane Doe, trading as Firmament Lab], [POSTAL ADDRESS — use a PO box or virtual mailbox], reachable at [CONTACT EMAIL].

What we collect and why

• Email address — to send you a confirmation and, later, launch/preorder news.
• Name (optional) — to address you personally.
• Country (declared) and device model — to gauge demand and plan shipping.
• Approximate country from your IP (geo_country) — for aggregate statistics and basic anti-fraud. We do not store your full IP address.
• Campaign tags (UTM) and the referring site — to understand where signups come from.
• Timestamps of signup and confirmation, plus the consent version you agreed to — as proof of consent.

Lawful basis

We process your data based on your consent (GDPR Art. 6(1)(a)), captured via a double opt-in: you confirm via a link we email you. You can withdraw consent at any time (see below); withdrawal does not affect prior processing.

How long we keep it

Unconfirmed signups are deleted after 14 days. Confirmed subscribers are kept until you unsubscribe or ask us to delete your data, or until the preorder programme ends.

Where your data is processed (international transfers)

Subscriber records are stored at rest in the EU (Hetzner, Germany). To run the site we also use processors that may handle some personal data outside the EU, under the EU–US Data Privacy Framework and/or Standard Contractual Clauses:

• Cloudflare — network/tunnel, bot protection (Turnstile) and cookieless analytics (global edge).
• [EMAIL PROVIDER — e.g. Postmark / Mailgun EU / Brevo] — sends our confirmation and update emails.
• [BACKUP STORAGE — e.g. Cloudflare R2 (EU) / AWS S3 eu-central-1] — encrypted offsite backups.
• YouTube (Google) — the demo video loads only after you click play.

Cookies & tracking

We use no tracking cookies. Our analytics are cookieless and aggregate. Cloudflare Turnstile (the bot check) runs on the signup form and does not track you across sites. The demo video contacts YouTube only when you click play.

Your rights

You can access, correct, export, or delete your data, and object to or restrict processing. To unsubscribe, use the link in any email or write to us. To request deletion or exercise any other right, email [CONTACT EMAIL]. You may also complain to your local data protection authority.

Contact

[CONTROLLER NAME] · [POSTAL ADDRESS] · [CONTACT EMAIL]