privacy

short version: we keep very little, we never sell it, and you can delete it yourself in one tap.

who we are

the team behind nothingwtf.com. we decide what happens with your data, and you can always reach us at hello@nothingwtf.com.

what we keep

• your email address
• your invite code, and the code of whoever invited you (if anyone)
• when you joined, confirmed your email, or unsubscribed
• your browser's user agent (which browser and phone you used, not who you are)

what we don't do

no cookies. no analytics. no ads. no tracking pixels. no third-party scripts or fonts: everything on this site loads from this site. we never sell your data or hand it to anyone for marketing.

why, and on what basis

• to email you about the waitlist: a confirmation when you join, then updates, sneak peeks, early access and the moment it's ready. we only email you because you asked to join and confirmed your email (your consent). you can take it back any time.
• to count your invites and show your spot. that's part of the waitlist you joined, so the same consent.
• to keep bots and fake sign-ups out: we check that your email's domain can actually receive mail, and limit how often one connection can sign up. for that, your ip address is turned into a scrambled code that can't be turned back into the address, and kept for at most 2 days. we do this because we have a legitimate interest in a waitlist of real people.

who helps us

three services handle data for us, only on our instructions, under data processing agreements:

• supabase stores the waitlist, in the eu (frankfurt).
• vercel hosts this site and runs its code, in the eu (frankfurt). like any web host, it briefly logs requests, including ip addresses, to keep the site running and safe.
• resend sends our emails.

vercel and resend are us companies. where data leaves the eu, it's protected by the safeguards eu law requires (the eu's standard contractual clauses).

how long we keep it

until the waitlist has done its job, and at the latest 12 months after launch. then we delete it. if you unsubscribe, we keep only your spot and stop emailing. if you delete yourself, everything goes right away. the scrambled ip codes are gone after 2 days.

on your phone

this browser remembers your spot and your link (stored on your device only, not a cookie), so you don't have to join twice. tap "use a different email" on the main page to forget it.

your rights

you can see what we have on you, correct it, get a copy, delete it, object, or take back your consent. the fastest way out is the link at the bottom of every email: stop emails, or delete yourself completely. or just email hello@nothingwtf.com and we'll sort it within 30 days, usually much sooner. you can also complain to your local data protection authority.

age

you need to be 16 or older to join.

changes

if this changes in a way that matters, we'll email you before it does.

last updated 12 november 2026.