Privacy Policy

Last updated: 2026-08-21

• The waiting list. If you submit the form, we store: your email address, the language you signed up from, when and what exact consent text you agreed to (we record our own copy of it, hashed, not what your browser sends), and two one-use security tokens (only their hash — never the token itself) used to confirm your address and to let you unsubscribe. We do not store your IP address in this table.
• Why. To send you updates about Vyniq's development and, once it launches, tell you it's available. Nothing else — no profiling, no resale, no third-party marketing.
• Confirmation, always. An address is never sent anything until you click the confirmation link in the email we send you. If you never confirm, that signup is deleted automatically after 30 days — it does not sit around indefinitely.
• How long, once confirmed. We keep your row for as long as you stay subscribed. Unsubscribing (one click, no login, no reason asked, in every email we send) removes you from future sends; you can also ask us to delete the row entirely at any time (see "your rights" below) — either way, we delete the data, we don't just flag it as inactive.
• Anti-abuse, without profiling you. To stop the form being spammed, we count signups per IP address per hour — but never the raw IP: it is hashed with a salt that rotates hourly, and only that hash is stored, in a separate table from the waiting list itself, purely to decide "too many, try later". Those counters are deleted 48 hours after their window closes, and that deletion — not the hashing — is what keeps them from becoming a history of your IP.
• Who processes this data. Supabase (our database), hosted in the EU, is our data processor for the waiting list. Resend, our email-sending provider, processes the confirmation and update emails and does not receive a copy of the waiting list itself — only the address on each individual email as it is sent. Resend is US-based; it does not offer EU data residency, so this transfer relies on the EU-US Data Privacy Framework plus its own Data Processing Agreement, not solely on Resend's own commitments.
• Your rights. You can ask to see exactly what we hold about your address, correct it, or have it deleted completely (not just unsubscribed) — email us and we'll act on it directly against the database, the same way an unsubscribe request is handled.
• No cookies, no browser storage, on this form either. Confirming or unsubscribing works from a link in an email, not from anything remembered in your browser.
• No third parties beyond what's described above. Nothing on this page loads from a domain other than vyniq.app (fonts are self-hosted; analytics too, see below).
• Analytics: Vercel Web Analytics, first-party and cookieless. We use it to see aggregate traffic (page views, referrers) — it doesn't set a cookie, doesn't use local storage, and doesn't build a profile of you across sites. Its script and requests are served from vyniq.app, not a third-party analytics domain.
• Hosting logs. This site is served by Vercel, which keeps standard access logs (IP address, timestamp, user agent) for operating and securing its infrastructure — we don’t read them for analytics or marketing.
• No cookie banner, on purpose. A consent banner exists to ask permission for storage that isn't strictly necessary — this page (outside the waiting-list form above) uses none: no cookies, no local storage, no session identifiers.

Terms

Last updated: 2026-08-21

• Vyniq is software in development. This page does not offer a product for download, account, or subscription yet.
• No warranty of any kind is made about the eventual product's availability, pricing, or timeline.
• These terms cover this page only, not the desktop application, which has its own license in the repository.
• These terms are superseded when the real product launch page replaces this one.