Launch list privacy notice
DataNaat operates Verdalune and this launch list. For questions or to exercise your privacy choices, contact hello@verdalune.app. You can also send privacy requests to info@datanaat.com.
Your choice and the purpose
We use your email and chosen device platform to notify you when Verdalune launches. Joining requires your explicit consent. It does not create an app account, grant beta access, require a purchase or reserve a discount. Existing app users are not automatically added to this list.
What we keep
We store your email, platform (iPhone / iPad, Android or both), language, server-generated registration and consent dates, the consent text version, subscription status and confirmation status. Submitting the form does not verify that you control the mailbox; the address remains unverified unless a separate confirmation establishes this. If present, we also keep only the permitted campaign fields: utm_source, utm_medium, utm_campaign, utm_content and utm_term. We do not save the full page URL or arbitrary query parameters with your registration.
Storage, security and internal reports
Supabase stores the list with restricted access; visitors cannot read or download it. Cloudflare hosts the website. These network services may process IP addresses, request times and limited technical metadata to provide and protect the service. Our registration endpoint uses request limits and a daily keyed hash of the network address to limit abuse rather than storing the raw IP in the launch list.
The daily reporting process is configured and enabled to send the Verdalune team a private CSV attachment through server-authorized Google Workspace/Gmail. It includes new registrations from the previous day in America/Mexico_City that are still subscribed when the report is generated: email, platform, language, registration date, confirmation status and campaign source. The attachment is not published at an open link. Joining does not trigger an immediate email to you.
To understand where signup may stop, we keep daily aggregate counts of homepage loads, form interactions, submission attempts, validation failures, technical failures and server acknowledgements. These counters measure documents and attempts, not people or unique visits. Each count is grouped only by language, a fixed campaign category and, where relevant, a fixed error category. We retain the aggregates for 90 days, with no individual event history. This measurement uses no cookies, browser storage or persistent visitor identifiers, and sends no email, form values, page URL, referrer, advertising identifiers or network identifiers in its event payload. Hosting services still receive the technical network metadata described above. Delivery is best effort, so missing counts do not mean nobody visited or signed up. Google Ads conversion reporting and advertising analytics remain inactive for this form. Consent to the launch announcement is separate from advertising measurement consent.
Withdrawal, retention and requests
You can withdraw your consent through a private unsubscribe link provided for your registration or by contacting hello@verdalune.app. A repeated signup does not reactivate an unsubscribed address. Unsubscribing does not automatically delete the record: the suppression status and consent evidence remain so that we can respect your choice. There is no automatic deletion period configured for this list. Contact us to request access, correction or deletion; we may need to verify that the request comes from the mailbox owner before changing or disclosing a record.