Privacy

Deze pagina is in het Engels: de Engelse tekst is de bindende versie.

Nog te schrijven. Each section below is a clause still to be written.

1. Who is responsible (controller) TODO

2. What we collect, and what we deliberately do not TODO

3. Email addresses: waitlist and purchase only; a purchase address passes through once and is kept as a hash

When you subscribe to launch updates we store your email address, the language you subscribed in and the date. The address is encrypted before it is stored in our database (Cloudflare D1, in the European Union) and is decrypted only to send the emails you asked for: a few around launch, never a newsletter beyond that. To send them we hand the list to Resend, our email processor; nothing else receives it.

Every email carries an unsubscribe link that works in one click, or you can write to . An address that unsubscribes is deleted, and the whole list goes ninety days after launch.

4. Progress data: anonymous, on your device, synced without an account TODO

5. Reports you send us TODO

6. Purposes and legal bases (GDPR) TODO

7. Storage location and retention TODO

8. Processors: Cloudflare, Paddle, Resend, Sentry

Cloudflare hosts the site and runs our Worker, our database and our storage, in the European Union where the product allows it; Cloudflare Web Analytics counts page views without a cookie. Paddle is the merchant of record for Pro: it takes the payment and holds the buyer's details under its own policy, and hands us a transaction id and, once, the address to send the licence key to. Resend sends our emails. Sentry receives error reports from our Worker and from the checklist, forwarded through our Worker so that no report carries your IP address. Google serves the consent manager and the ads on free-tier pages, only after a consent decision, and receives nothing from us about you.

9. Cookies and local storage

We set one functional cookie, af_pro, which says whether the account on this device is Pro so that no advertising or consent script loads for it; it carries no identifier. Progress lives in your browser's IndexedDB. Google's consent manager stores your advertising choice in its own cookies once you have made one. Nothing else is stored in your browser by us. The cookie notice lists each of these and how to change your choice.