Privacy on the waitlist

Who is responsible

Sparked Studio, org.nr. 936 692 028, Oslo, Norway. We are the data controller for the waitlist.

Contact: privacy@example.com

What we store

• Your email address.
• When you joined, when you ticked the consent box, and which wording you saw.
• Your queue data: your invite code, and whose invite link you used, if any.
• A private code that lets you see your place and remove yourself. Your browser keeps a copy of it.
• If you came through a friend’s invite link, your browser keeps the invite code until you join or close the tab.

To stop abuse, we also keep a scrambled (hashed) form of your IP address with a counter. We cannot read the address back from it. It is deleted after the day is over.

What we do not do

• No cookies.
• No analytics, trackers or ad pixels.
• No fonts or scripts loaded from other companies.
• We do not sell your address or share it with anyone for their own use.

Why, and on what legal basis

We use your address to email you about the Pliny pilot and the launch. The basis is your consent (GDPR article 6(1)(a)). You can withdraw it at any time.

The abuse counter keeps the queue fair. The basis is our legitimate interest (GDPR article 6(1)(f)).

Who else handles the data

Cloudflare hosts this page and the database, as our data processor. The database is set to be stored in the EU. Cloudflare is a US company, and its data processing agreement includes the EU standard contractual clauses.

How long we keep it

Until you leave the list. We delete the whole list no later than 12 months after the public launch. If Pliny is cancelled, we delete it within 30 days.

Your rights

You can ask to see, correct or delete what we hold about you, and you can withdraw your consent.

• Remove yourself: open the waitlist page in the browser you joined with and press “Remove me from the list”. Your row is deleted at once.
• Or email us at privacy@example.com from the address you joined with.
• Every email we send has a way to leave the list.

You can also complain to the Norwegian Data Protection Authority, Datatilsynet, at datatilsynet.no.