Privacy policy
Your data, in plain words.
Who we are
econfeed is run by [company name], based in Norway. We are the data controller for the personal data described here. Contact us about privacy at [contact email].
What we collect
Only what you give us when you join the waitlist, plus what we need to keep the form safe.
| Data | Why |
|---|---|
| Your email address | To email you about early access and the launch. |
| What you would use econfeed for (optional) | To decide which sources and features to build first. |
| When you gave consent, and which version of the consent text you saw | To prove that you agreed to be contacted. |
| When you confirmed your email (if we ask you to) | To make sure the address is yours. |
| When you signed up and from which page | To keep the list in order. |
| A one-way scrambled form (hash) of your IP address | To stop abuse by limiting how many signups come from one network. Deleted within 24 hours. |
We do not buy data about you, combine it with other sources, or sell it.
Legal basis
Your consent (GDPR article 6(1)(a)). You give it by ticking the box on the form, which is never ticked in advance. Norwegian marketing law also requires your consent before we send you email about our service. You can withdraw consent at any time by using the unsubscribe link in any email or by writing to us. Withdrawing does not affect what we did before.
The short-lived IP hash is kept on the basis of our legitimate interest in protecting the form from spam and abuse (article 6(1)(f)).
How long we keep it
We keep your waitlist entry until you unsubscribe or ask us to delete it. If econfeed does not launch, we delete the whole list. If we ask you to confirm your email and you do not, we delete the entry after 30 days.
Who processes it for us
The site, the form and the waitlist database run on Cloudflare (Cloudflare Pages, Workers and D1). Cloudflare processes the data on our behalf under a data processing agreement. Cloudflare may process data outside the EEA, covered by the EU-US Data Privacy Framework and the EU standard contractual clauses. When we start sending email, we will name the email provider here before we use it.
Cookies and analytics
This site sets no cookies and does not use local storage to track you, so there is no cookie banner. Fonts are served from our own site, not from a third party.
We may use Cloudflare Web Analytics to count visits. It does not use cookies or fingerprinting and does not track you across sites. It records things like the page, the referring site, the country and the browser type, in aggregate.
The live board and the status page load data from our own API. To stop abuse, the API keeps a request counter per IP address in memory for a few minutes. It does not log or store your IP address.
Your rights
Under the GDPR you can ask us to:
- show you the data we hold about you (access),
- correct it (rectification),
- delete it (erasure),
- limit how we use it (restriction),
- give it to you in a machine-readable format (portability),
- stop using it (objection, and withdrawing consent).
Write to [contact email]. We answer within one month. If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority, Datatilsynet.
Changes
If we change this policy, we update the date at the top. If a change affects what we do with your email, we tell you by email first.