Privacy policy

01What this covers

This policy covers lingset.com while Lingset is in private beta — that is, the waitlist form and the emails that follow from it. Before the app itself opens, this policy will be updated to cover what the app stores (and you'll be told about the change).

02What we collect

• Your email address, when you type it into the waitlist form.
• A consent record — the time you signed up and the time you clicked the confirmation link (this is how we prove you actually asked to be here).
• Ordinary server logs — IP address and browser type, kept briefly for security and debugging.

That's the whole list. The site sets no advertising or analytics cookies.

03What we do with it

Your email is used for exactly what the form said: your seat when the beta opens, plus occasional notes as Lingset takes shape — a few emails a season, never more. The legal basis is your consent, which you can withdraw at any time by clicking unsubscribe in any email.

We never sell your address, rent it, or share it for anyone else's marketing.

04Where it lives

The list is stored in our own database, on a server we rent from Linode (our hosting provider). When we send an email, it goes out through Resend, which processes your address on our behalf under its data-processing agreement. Nobody else sees it.

05How long we keep it

• If you unsubscribe, your address is removed from the active list immediately, keeping only a suppression record so we don't email you again.
• If you never confirm your signup, the unconfirmed address is deleted within 30 days.
• The form attracts automated spam, so we can mark an address as spam. That kept record is a suppression record like the one above — it exists so the address is never emailed again — and it is the one exception to the 30-day rule, because deleting it would just let the same bot back in. If this has happened to a real address, write to us and we'll undo it.
• Server logs are kept for at most 30 days.

06Your rights

Wherever you live — and certainly under the GDPR if you're in the EU — you can ask to see the data we hold about you, correct it, or have it deleted. Since it's one email address, the fastest route is simply writing to us; we'll act within 30 days. EU residents also have the right to complain to their local data-protection authority.

07Who we are

Questions about any of this? Just reply to any email we send — a person reads it.