Privacy policy.

1. What data we collect

Waitlist sign-ups

When you join our waitlist, we collect your email address and, optionally, your first name. This data is processed by EmailOctopus (our email marketing provider) on our behalf.

Contact form

When you submit the contact form, we collect your name, email address, the subject you select, and your message. This is sent directly to us via email and is not stored in a database.

Technical data

Our hosting infrastructure (AWS CloudFront) processes standard request logs including IP addresses and browser information. We do not use this data for profiling or tracking.

2. How we use your data

• Waitlist email — to notify you when MyMissingNote launches and share relevant updates. We will not use it for unrelated marketing.
• Contact form data — solely to respond to your message.
• Technical logs — for security and infrastructure monitoring.

3. Legal basis for processing

• Waitlist — your consent, given when you submit the form (GDPR Art. 6(1)(a)).
• Contact form — our legitimate interest in responding to enquiries (GDPR Art. 6(1)(f)).

4. Who we share your data with

We do not sell your data. We share it only with the following processors:

• EmailOctopus Ltd — email marketing platform for waitlist management. Their privacy policy is available at emailoctopus.com.
• Amazon Web Services (AWS) — cloud infrastructure for this website and email delivery. AWS processes data under a Data Processing Agreement compliant with GDPR.

5. International data transfers

EmailOctopus is a UK-based company. Data transfers from the EU to the UK are covered by the EU adequacy decision for the UK. AWS infrastructure used for this website is located in the EU (Frankfurt region).

6. How long we keep your data

• Waitlist data — until you unsubscribe, or until we delete the list, whichever comes first.
• Contact form messages — retained in our email inbox for as long as necessary to handle your enquiry, then deleted.
• Technical logs — retained for up to 30 days.

7. Your rights

Under GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — unsubscribe from the waitlist at any time using the link in any email we send.

To exercise any of these rights, email privacy@mymissingnote.com. We will respond within 30 days.

8. Cookies and local storage

This website does not use tracking cookies or analytics. We store one item in your browser's local storage: your colour theme preference (dark or light). This never leaves your device.

9. Supervisory authority

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Dutch data protection authority:

Autoriteit Persoonsgegevens (AP)
autoriteitpersoonsgegevens.nl

10. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated to waitlist subscribers. The date at the top of this page always reflects the latest version.