What we do with your data

Who we are

Opti-U Ltd is the controller for the data described here. We are registered in England and Wales, company number 16690406, at Sparkhouse, Rope Walk, Lincoln, LN6 7DQ.

For anything in this notice, including any of the rights below, contact us at info@opti-u.com.

What we collect, and why

When you submit the waitlist form we store the following. Nothing else on this site collects personal data.

Your email address

So we can contact you when a beta cohort opens. This is the only piece of information you give us directly.

A one-way hash of your email

Used to detect duplicate signups without needing to compare addresses directly.

A one-way hash of your IP address

Used for rate limiting and abuse prevention. The hash is salted and rotates daily. We do not store your IP address itself.

A one-way hash of your browser's user-agent string

Used to identify automated signups.

Campaign parameters (utm_source, utm_medium, utm_campaign)

Present only if you arrived via a tagged link. Tells us which channel brought you here.

The time you gave consent

So we can evidence that consent was given, as we are required to.

Our lawful basis

Consent, given by ticking the box on the waitlist form. You can withdraw it at any time using the unsubscribe link in any email we send you, or by contacting us. Withdrawing consent does not affect anything we did before you withdrew it.

How long we keep it

We keep your waitlist entry for 12 months, or until you unsubscribe, whichever comes first. After that it is deleted.

We also keep a short-lived log of signup attempts — a hashed IP address, the outcome, and a timestamp — to stop the form being abused. These records are deleted after 90 days.

Both periods are enforced by scheduled deletion jobs, not by manual housekeeping.

Who else processes it

We do not sell your data, share it with advertisers, or use it for automated decision-making or profiling.

• Supabase — database hosting, on AWS in Ireland (eu-west-1). Your data is stored in the European Economic Area, which the UK recognises as providing an adequate level of protection.
• Vercel — website hosting, and privacy-preserving analytics that use no cookies and do not identify individual visitors.
• Cloudflare Turnstile — a bot check on the waitlist form, used to tell humans from automated signups.
• Vercel and Cloudflare operate global networks, so some processing may take place outside the UK. Both are engaged under contractual terms intended to provide protection equivalent to UK data protection law.

Cookies

This site sets no cookies at all — not for analytics, not for anything else.

We store a single item in your browser's session storage, marking that you have seen the opening animation so it does not replay on every page you visit. It contains no identifier, is not sent to our servers, and is erased when you close the tab.

Your rights

Under UK data protection law you have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. You can also withdraw consent at any time.

Unsubscribing deletes your waitlist entry outright rather than flagging it as inactive, so it doubles as an erasure request.

To exercise any of these rights, contact us at the address above. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this notice

If we change what we collect or why, we will update this page and change the date at the top.