Privacy

What we collect

Your email address, if you type it into the waitlist form and submit it. That is the only piece of personal information this site asks anyone for. No name, no company, no phone number, no job title.

The form also contains one hidden field that your browser can see and you cannot. It exists to catch automated submissions. If it comes back filled in, we discard the whole submission and store nothing at all — including whatever was in it.

What we do with it

We store it so that we can email you when there is something to look at. That is the entire purpose. Realistically that is a handful of emails over the life of this waitlist, not a newsletter.

We do not sell it, rent it, or trade it. We do not run it through an enrichment service to find out where you work. We do not upload it to Google, Meta or LinkedIn as a customer list, a custom audience or a seed for a lookalike audience. For a product whose entire argument is about who gets counted and how, quietly monetizing the people on the waitlist would be an odd way to begin.

Who else can see it

Two companies, both because they have to be involved for the thing to work: the email provider we use to send that email, and the hosting provider that runs this site (Vercel). Nobody else. If we ever add a third, this page changes before it does.

Analytics, cookies, and tracking

This site runs no analytics. No Google Analytics, no Meta pixel, no session recording, no heatmaps, no A/B testing script. If that changes — and it probably will, because we sell to people who run paid acquisition and we will eventually run some ourselves — this page will change first and will name the specific tool.

This site sets no cookies. If you switch the theme, the word light or dark is saved in your browser’s local storage so the page doesn’t flash the wrong colours next time. That value never leaves your browser and is never sent to us.

Our hosting provider keeps ordinary server request logs — IP address, user agent, the URL requested — for operational and security reasons. That is standard for any website and it is not something we read, analyse, or connect to your email address.

How long we keep it

Until you ask us to delete it, or until this waitlist has served its purpose and we have said so. If Endpoint Forms never ships, the list gets deleted rather than sold or repurposed.

Getting your address removed

Reply to any email we send you and say so — that is the fastest route and it goes to a person. If we have not emailed you yet and you want off the list already, get in touch through corey.co ↗ (opens in a new tab). Either way we delete the address itself, not just flag it as unsubscribed.

If you are in the EU or UK, the rights you have under the GDPR — access, correction, deletion, portability, objection — apply to that one email address, and the same routes above are how you exercise them. There is nothing else on file to ask about.

You can check

The code that receives the waitlist form, validates it, and decides what to do with it is public. If you would rather read the handler than trust this page, it is in the repository ↗ (opens in a new tab).

Changes to this page

When this changes we will update the date at the top and say what changed rather than silently swapping the text. The moment there is a product, there will be a longer privacy policy that covers submissions, verdicts and CRM connections — and it will be written the same way this one was: about what the software actually does.