Legal

Privacy

Last updated 2026-09-10

Who this is

This site and the Spool beta waitlist are run by [FULL NAME], [BUSINESS FORM, IF ANY], [POSTAL ADDRESS]. Contact for anything on this page: [privacy@spool-negative.com].

That is the controller under the EU General Data Protection Regulation — the person responsible for the data this page describes.

What is collected

Only from the email signup form on the homepage, and only after you confirm the link that gets emailed to you:

• The email address you type in
• Your country, read from Cloudflare's network — never your IP address, which this site does not store anywhere
• When you signed up and when you confirmed
• Which version of this policy you agreed to (the date at the top of this page)
• Which part of the site the form was on, for our own sense of what works

Submitting the form does not add you to anything by itself — it sends a confirmation email. Nothing further happens unless you click the link in it.

Why

To send one email: the day the Spool beta opens. Nothing before it, nothing else after, unless a future version of this page says otherwise — in which case the version date above will have changed.

Legal basis

Your consent (GDPR Article 6(1)(a)), given by checking the box and confirming the email. You can withdraw it at any time — see Unsubscribe below — with no effect on the lawfulness of anything done before you withdrew it.

How long it's kept

Until you unsubscribe, or until the beta announcement has been sent and eighteen months have passed with no further use of the list, whichever comes first.

Who else sees it

Two processors, neither of which uses your data for anything but this:

• Cloudflare — stores the record and runs the site. Processed in the EU (Frankfurt/Warsaw region).
• MailerSend — delivers the confirmation and beta-announcement emails. Based in Latvia, within the EU — no transfer outside it.

Nobody else. No advertising network, no analytics platform, no data broker.

Cookies and tracking

None set by this site. No analytics script runs here, and no cookie is written for any purpose.

The one thing worth naming: this page's typeface loads from Google Fonts' own servers, which receive your IP address to serve the font files, the way any web font does that isn't self-hosted. [We're moving this to a self-hosted font — will remove this line once done.]

Your rights

Under the GDPR, you can ask to:

• See what's held about you
• Correct it
• Have it deleted
• Get a copy in a portable format
• Object to how it's used

Write to [privacy@spool-negative.com] for any of these. You can also complain to your country's data protection authority — in Poland, the Urząd Ochrony Danych Osobowych (UODO).

Unsubscribe

Every email from Spool carries a one-click unsubscribe link. Clicking it removes your address from the list immediately — no login, no confirmation step, no delay.

Changes

If this page changes in a way that matters, the date at the top changes with it, and that new date is what gets stamped on any consent given afterward.