Privacy Policy

What we collect

When you join the waitlist, you give us your email address. That is the only thing we ask for.

Alongside it we record: the time you signed up; which form you used, so we can tell which part of the page works; your browser's user-agent string; any campaign parameters in the link you arrived through (utm_source, utm_medium, utm_campaign); and a one-way cryptographic hash of your IP address. We store the hash, not the address itself — it lets us rate-limit abuse without keeping a record of where you were.

Why we collect it

To operate the waitlist: to send your welcome message, to email you at launch, and to honour the founding member offer.

To understand which parts of the page bring people in, so we can improve it.

To prevent automated abuse of the signup form.

The email we send you

As soon as you join, we send one welcome message confirming your spot. We send it once per address — signing up again does not trigger another.

Who else handles your data

We use a small number of service providers, each of which processes data on our behalf and under contract: Supabase stores the waitlist database; Resend delivers our email; Vercel hosts the site and provides its analytics and performance measurement.

We do not sell your personal information, we do not share it with advertisers, and we do not use it to build a profile of you across other websites.

Analytics and cookies

This site sets no advertising cookies and runs no third-party ad trackers. Our analytics are aggregate and do not identify you individually.

How we protect it

The waitlist database has row-level security enabled and no client-side access — every write goes through our own server endpoint, and the key that can read the table never leaves the server. Traffic to the site is encrypted in transit and forced to HTTPS. Your IP address is stored only as a salted one-way hash, so it cannot be reversed back to the original address.

No system is perfectly secure, and we will not pretend otherwise. We limit what we collect precisely so that there is less to lose.

If something goes wrong

If we discover a breach affecting your personal information, we will notify the people affected without undue delay, and any regulator where the law requires it. Given that the only personal data we hold is an email address, we will tell you plainly what happened rather than bury it.

How long we keep it

We keep your email address until you unsubscribe or ask us to remove it, or until the waitlist has served its purpose after launch.

Your choices

Every email we send includes an unsubscribe link, and supports one-click unsubscribe in mail clients that offer it. Unsubscribing stops all further mail.

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it entirely. Email us and we will action it.

Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA. We apply the same process to everyone who asks, wherever you are.

Children

This site is not directed to children under 13, and we do not knowingly collect their information.

Changes to this policy

If we change how we handle your data, we will update this page and change the date at the top. If the change is significant, we will tell the waitlist by email.

Contact

This site is operated by MEND Sciences, Inc., a Delaware corporation. Questions about this policy, or requests about your data, go to the address below.