Privacy policy

Short version: we ask for your email address so we can tell you once, when WhoFlopped launches. That's the whole thing. No analytics, no tracking pixels, no advertising cookies on this site.

What this covers

This page covers whoflopped.com — the site you're on and its waitlist form. The WhoFlopped app isn't built yet. When it ships, it'll have its own privacy policy covering what happens inside the app, and this page will point you to it.

What we collect

When you join the waitlist:

• Your email address — the one you typed into the form.
• When you joined, and that you came from the landing page — so we know where signups came from once there's more than one place to sign up.
• A one-time confirmation token, which is what the link in your confirmation email carries. It's tied to your signup and nothing else.

That's everything. We don't ask for your name, we don't set analytics or advertising cookies, and there's no tracking pixel in the confirmation email.

Bot protection

The waitlist form is protected by Cloudflare Turnstile, which is what stops bots from stuffing the list with junk addresses. To do that, Turnstile receives your IP address and some signals about your browser. It's a privacy-focused alternative to the "click all the traffic lights" CAPTCHAs, and Cloudflare doesn't use what it sees there to build an advertising profile of you.

The details are in Cloudflare's Turnstile Privacy Addendum.

Why we have it, and on what basis

To email you when WhoFlopped launches, and to keep your address on the list until then. Nothing else.

The legal basis is your consent, which you give by clicking the link in the confirmation email. Until you click it, you're not on the list — that's deliberate. It also means nobody can add your address without access to your inbox.

Who else touches it

Three services, each doing one job:

• Cloudflare — hosts this site and runs the bot protection above. Privacy policy
• Supabase — stores the waitlist. Privacy policy
• Resend — sends the confirmation email. Privacy policy

Your address is never sold, never rented, and never shared with advertisers. We won't send you anything beyond the confirmation email and the launch announcement.

How long we keep it

Until WhoFlopped launches and we've told you about it — or until you ask us to remove you, whichever comes first. If the app never ships, we'll delete the list rather than sit on it.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Depending on where you live you may also have the right to receive a copy of it or to complain to a data protection authority. Email [email protected] and we'll sort it out — no form, no account, no hoops. Withdrawing consent is as simple as asking to be taken off the list.

Changes to this page

If we change what we collect or why, we'll update this page and change the date at the top. If the change is significant and you're already on the list, we'll email you about it.

Getting in touch

Anything on this page, or anything you'd like removed: [email protected].