1. Who we are
Curvorian ("we", "us", "our") operates curvorian.com. This policy explains what data we collect, why, and how we handle it.
2. Data we collect
Email address
When you join the launch waitlist, we collect your email address. It is sent to our email service provider, Buttondown, for the sole purpose of notifying you when our product launches. You can unsubscribe at any time via the link in any email we send.
Error monitoring
We use Sentry to monitor for application errors. When an error occurs, Sentry collects technical information including browser type, operating system, device type, and the error stack trace. We do not collect IP addresses or personally identifiable information through Sentry.
IP address (rate limiting)
When you submit the launch waitlist form, we briefly process your IP address to enforce per-address rate limits on the subscription endpoint. Your IP is held only in server memory for a few minutes while the rate-limit window is active, is never written to disk or shared with third parties, and is automatically discarded as soon as the window elapses.
3. How we use your data
- Email addresses: to send launch notifications only.
- Error data: to identify and fix bugs on our website.
4. Legal basis for processing (GDPR)
If you are located in the European Economic Area, we process your personal data under the following legal bases:
- Consent — your email address is collected only when you voluntarily submit it via our subscription form.
- Legitimate interest — error monitoring is used to maintain and improve the reliability of our website; short-lived IP processing is used to prevent abuse of our subscription endpoint.
5. Third-party services
- Buttondown — receives your email address for mailing list management.
- Sentry — receives anonymous error and performance data.
- Vercel — hosts our website and processes requests.
- Cloudflare — provides DNS and security services.
6. International data transfers
Your data may be transferred to and processed in the United States, where our service providers operate. By using the site and submitting your information, you acknowledge that your data will be processed in the United States, which may have different data protection laws than your country of residence.
7. Cookies
We do not use cookies for tracking or advertising. Essential cookies may be set by our hosting infrastructure (Vercel, Cloudflare) for security and performance purposes.
8. Your rights
You have the right to access, correct, or delete your personal data. To exercise these rights or unsubscribe, contact us at the email below or use the unsubscribe link in any email we send.
For California residents (CCPA)
Under the California Consumer Privacy Act, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of your personal information. We do not sell your personal information.
9. Children's privacy
The site is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13.
10. Data retention
Email addresses are retained until you unsubscribe. Error monitoring data is retained for 90 days. IP addresses processed by our rate limiter are held only in server memory for a few minutes per request and are never persisted.
11. Data breach notification
In the event of a data breach affecting your personal information, we will notify affected users via email within 72 hours of becoming aware of the breach, in accordance with applicable laws.
12. Contact
For privacy-related inquiries, contact privacy@curvorian.com.