Privacy
Early-access waitlist for DROP 001 · last updated 1 October 2026
Who is responsible
UNTIL WE BECOME is run by Lukas Kopecky, a private individual in the Czech Republic, who is the controller of your personal data. Contact for anything about your data: [email protected].
What we collect and why
When you request early access, we store:
| Data | Why |
|---|---|
| Your e-mail address | To e-mail you about DROP 001 (early access and launch), as you asked. |
| A record of your consent: the exact consent sentence, the time, and that you acknowledged the expected retail price (€79) | To be able to prove that you agreed, and to what. |
| Where you signed up on the page, campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_content), the referring page and your browser's user-agent string | To understand which channels bring interest. Not used to identify you. |
| Whether and when you confirmed your address with the link we e-mailed you | Only confirmed addresses receive DROP 001 e-mails and count as sign-ups. |
| A keyed one-way code derived from your IP address (not the address itself) | To limit abuse: too many sign-ups or e-mails from one source. Deleted after 24 hours. |
We do not store your IP address itself. We do not sell or share your data for advertising.
Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time; this does not affect what happened before.
Confirming your address
After you send the form, we e-mail you a confirmation link. Your sign-up counts only after you open the link and press Confirm my email. If you do not confirm within 7 days of your last request, we delete your address, your consent record and the link. To protect against misuse, we send at most a few confirmation e-mails to one address per day.
Bot protection
The form uses Cloudflare Turnstile to keep out automated sign-ups. Turnstile evaluates technical signals from your browser when the form loads and when you submit it. It does not set advertising cookies. See Cloudflare's privacy policy.
Who processes it for us
Cloudflare, Inc. hosts this site and stores the waitlist in a database located in the European Union (Cloudflare D1, EU jurisdiction). Cloudflare acts as our processor under its data processing addendum.
Brevo (Sendinblue SAS, France) sends the confirmation e-mail and our DROP 001 e-mails, and keeps the list of confirmed addresses for that purpose, as our processor under its data processing agreement. Links in these e-mails pass through Brevo's own address before they reach this site. Brevo counts opens and clicks of the confirmation e-mail only anonymously, in aggregate statistics, not per person. See Brevo's privacy policy.
How long we keep it
Unconfirmed sign-ups: deleted automatically 7 days after your last request (an automatic check runs every hour). Confirmed addresses: kept until 12 months after the launch of DROP 001, or until you unsubscribe or withdraw consent, whichever comes first. The IP-derived code: 24 hours. Your consent record is kept as long as needed to prove consent for the e-mails we sent.
Your rights
You can ask us for access to your data, its correction or deletion, restriction of processing, and a copy in a portable format, and you can withdraw your consent — write to [email protected]. Every e-mail we send includes a way to unsubscribe. You can also lodge a complaint with the Czech data protection authority, Úřad pro ochranu osobních údajů (uoou.gov.cz), or the authority in your country.