Privacy
What we collect, and why.
Cadence is built on the idea that you own your stuff — your training, your data, your money. That goes for this page too. Here's exactly what we collect, why, and what we never do. No dark patterns, no selling your data, no surprises.
The short version
- We collect your email only if you join the waiting list — and only after you confirm it.
- We process your IP address briefly to stop bots and floods. It isn't used to track or profile you.
- We use privacy-friendly analytics to understand what's working on the page.
- We never sell or rent your data, and we never will.
What we collect & why
Email address — only if you join the waiting list
When you sign up, we send a confirmation link and only add you to the list once you click it (double opt-in). We use your email to send the confirmation, a welcome note, and — eventually — a single message when Cadence launches. That's it.
Lawful basis Your consent (Art. 6(1)(a) GDPR). You can withdraw it any time — see Your rights.
IP address — to keep the form safe
Every public form is a target for bots and floods. To stop that, we rate-limit sign-ups per IP address: we briefly count how many attempts come from one address over a short window. The address is used for that check and is not used to identify, track, or profile you. We don't store your raw IP in our analytics — where an IP is referenced for an abuse event, it's one-way hashed first.
Lawful basis Our legitimate interest in the security of the service (Art. 6(1)(f) GDPR; Recital 49 names abuse-prevention and network security explicitly).
Usage analytics — to improve the page
We use PostHog (hosted in the EU) to see things like page views and which sections people read. This helps us make the page clearer. We run it in a privacy-conscious way and don't use it to build advertising profiles.
Lawful basis Our legitimate interest in understanding and improving the site (Art. 6(1)(f) GDPR).
Who processes your data
We keep our stack small and use established providers as processors. They handle data on our behalf, under contract, and don't get to use it for their own purposes.
- Resend — sends our emails and stores waiting-list contacts.
- Upstash — the rate-limit counter used to block abuse.
- PostHog (EU) — privacy-friendly product analytics.
- Vercel — hosts the site and serves the requests.
How long we keep it
- Email: until you ask us to remove it, or until the waiting list is wound down after launch.
- Rate-limit data: a few minutes — it expires automatically after the abuse-protection window.
- Analytics: retained only as long as needed to understand trends, then aged out.
Your rights
Under the GDPR you can ask us to access, correct, export, or delete your data, and you can object to processing based on legitimate interest. Since the only thing we durably store is your email, the most common request — “take me off the list” — is the easiest: just ask, and you're gone.
Email us at gregoirelinot@gmail.com and we'll handle it. You also have the right to lodge a complaint with your local data-protection authority.
Changes
If we change what we collect or how we use it, we'll update this page and the “last updated” date above. The current version always lives here.
Questions? gregoirelinot@gmail.com