Privacy

The early-access waitlist

Added 18 September 2026.

What is stored when you join

• Your email address.
• The exact consent wording that was on screen, its version, the moment you agreed and the page you agreed on.
• A salted one-way hash of your IP address, never the address itself, kept for 30 days to investigate abuse of the form, then deleted.
• Any campaign parameters in the link you arrived on, the site that linked to you, and which in-app browser you were in, if any.
• If you answer the optional question after joining: the goal you tap and the sentence you type.

What it is used for

One email to confirm the address is yours, and then, only once you have confirmed, occasional emails about early access, launch news and what I am learning while building Shelf. At most one a week. The legal basis is your consent, GDPR Article 6(1)(a).

Who else handles it

Supabase stores it, Vercel hosts the page, and Resend delivers the email. Analytics on the public pages run on PostHog's EU instance without cookies and without an identifier that follows you between sites: nothing on those pages writes a cookie or stores anything in your browser.

How long, and how to leave

The record is kept until you unsubscribe or ask for it to be deleted. Every email carries a one-click unsubscribe link. To have the record removed entirely, email shelfapppt@gmail.com and it goes.

Age

The waitlist is for people aged 16 and over.