Privacy Policy

This site collects only the minimum information needed to validate our business idea during the pre-launch phase. We operate from Spain and handle data under the GDPR.

What we collect

• Survey answers: tied to a technical session identifier (httpOnly cookie, not trackable across sites). We don't ask for your name.
• Optional email: only if you voluntarily provide it. We use it to let you know when we launch, which is the purpose stated on the form itself. Next to the field there is a separate checkbox, unticked by default, to also receive our newsletter: these are two different lists, and if you leave it unticked we will not send you anything other than the launch notice. You can change your mind by writing to us.
• Usage analytics via PostHog: page views, interaction events (searches, filters, products and places viewed, cart adds, store clicks), language, device type and approximate location (country and region, derived from your IP). If you accept all, we also collect general clicks and form submissions, plus heatmaps (where you click and how far you scroll). This analytics uses a persistent pseudonymous identifier, so it is not fully anonymous. It is never sold to third parties.
• Your email linked to analytics (only if you accept all): if you leave your email and accepted all, we link it to your analytics profile so we can see the journey you took before leaving it. That profile's identifier is an irreversible hash of your email (SHA-256), not the email itself. With "necessary cookies only" this does not happen: the email stays in our database alone, unlinked from your browsing.
• Session recording (session replay): PostHog may pseudonymously record your interaction with the page (movements, clicks, navigation) to spot usability issues. Text fields, emails and forms are automatically masked: we don't capture what you type.
• Advertising measurement (only if you accept all): if you arrive from a Meta (Facebook/Instagram) or Google Ads ad, we load their measurement tools so we can tell which campaign works. When you complete a relevant action (leaving your email, reaching the cart, or finishing the survey) we also send that fact from our server to Meta, with your email irreversibly hashed (SHA-256) so they can match the conversion without us handing over your email in the clear.

How we use it

• Understand what products, prices, and events interest the audience.
• Spot usability issues and improve the site.
• Notify you (only if you leave an email) when we launch.

Legal basis

The banner has two levels. With "Necessary cookies only" we measure usage anonymously and in memory: no analytics cookie or identifier is stored in your browser, no session recording, and nothing from Meta or Google is loaded. With "Accept all", the analytics cookie, session recording and advertising measurement load only with your consent, which you can withdraw at any time. The technical session cookie is necessary for the site to work (legitimate interest).

Who we share it with

We do not sell or rent data. Technical providers process data on our behalf under contract: Supabase (storage), PostHog (analytics and session recording) and Vercel (hosting). If you accept all, Meta Platforms Ireland/Inc. and Google Ireland/LLC are added as recipients of the advertising measurement. Some of this processing happens on servers in the US, under the international-transfer safeguards required by the GDPR.

How long we keep it

Answers and analytics until the validation phase closes. Session recordings are kept for a limited period and then deleted. Emails until launch or until you ask to be removed.

Your rights

You can ask for access, correction or deletion of your data by messaging us on LinkedIn. You can withdraw consent by clearing your browser cookies and choosing "Necessary cookies only" when the banner reappears; from then on we stop storing analytics identifiers, recording sessions and loading advertising measurement.

Cookies and storage

• sb_session (httpOnly, technical, 90 days): identifies your session to save partial answers.
• cookie_consent (1 year): remembers your cookie choice.
• PostHog (analytics and session recording): cookies and local storage in your browser (including a pseudonymous identifier). Only if you accept all; with "necessary only" analytics runs in memory and stores nothing.
• _fbp, _fbc (Meta, 90 days) and _gcl_aw (Google Ads, 90 days): identify the ad you arrived from so the conversion can be attributed. Only if you accept all.