YOUR DATA. YOUR CHOICE.

Privacy.

A click is enough. Sharing your details is always optional.

Controller and contact

Controller: [ADD LEGAL NAME AND ADDRESS BEFORE LAUNCH]. Privacy contact: [ADD CONTACT EMAIL BEFORE LAUNCH]. These placeholders must be completed before public launch.

What we collect

A necessary, secure browser cookie identifies your participation for up to one year. We store only its SHA-256 hash and a participation timestamp. No name or email is required to join. Separate anonymous arrival timestamps are approximate analytics, not verified visits. We do not store your IP address or run advertising pixels.

Optional details and separate choices

When you request a personal thank-you, we store your optional name, email and timestamped consent. Marketing/newsletter and advertising permissions are separate, unchecked choices. Thank-you-only details are never used for marketing. No email is verified or sent yet; delivery and double opt-in must be configured before any sending. Advertising permission alone does not activate any tracking.

Legal basis and retention

Participation deduplication and anonymous evidence use our legitimate interest in running an honest experiment. Optional contact processing relies on consent, which you can withdraw at any time without affecting participation. Contact details are intended to be deleted within 12 months after the attempt ends, or sooner when withdrawn. Non-identifying evidence and consent proof are intended to be retained for up to 24 months after closure. The controller must implement and review this retention schedule before launch.

Withdraw or unsubscribe

Use the button below in the browser you joined with, or open your saved private withdrawal link on any device. It removes your contact details and revokes all three permissions. Your anonymous participation remains counted. Do not share your private withdrawal link.

Your rights and processors

You may request access, correction, erasure, restriction or portability through the controller’s contact above, and complain to your local data protection authority. Lovable Cloud processes stored data; the controller must confirm hosting location, processing agreements and any international transfer safeguards before launch. Any future email provider must be disclosed before use.

An independent experiment

This is unofficial, not Guinness-approved or endorsed. No record certification or email delivery is guaranteed. Policy version: 2026-10-15-v1.