Datenschutz

1. Who we are

Reetle is operated by the team building the AI E-Ink hub for smartphones. You can reach us at hello@reetle.eu for general questions and at support@reetle.eu for data protection requests. Our company address and legal entity will be specified here once we are publicly trading; until then, the email contacts are the official channels.

2. What we collect

For waitlist visitors and signups, the following:

• Email address. Required for the waitlist; without it we cannot tell you when pre-orders open.
• Country. Detected from your IP via Cloudflare. We use this to plan shipping windows and to comply with regional data rules.
• Campaign source (UTM parameters). If you arrived via a tracked link, the source / medium / campaign / term / content fields are saved alongside your signup. Used to measure which channels work.
• IP address. Collected on every request by the web server and stored against the signup event for fraud prevention.
• User agent. The browser and OS string your browser sends. Used to debug rendering issues and for security analytics.
• Page events. Page views, button clicks, and form submissions, each tagged with an anonymous browser identifier we generate on first visit. Only collected if you accept the Statistics or Marketing categories in the cookie banner.
• Consent decision. The categories you accepted, the time you decided, and your anonymous browser identifier. This is required by GDPR as proof we got consent before tracking.

We do not collect names, payment information, or government IDs during the waitlist phase. Those land in Sprint 3 alongside the commerce flow and will be covered by a separate update to this page.

3. Why we collect it, and the legal basis

• Waitlist email + welcome email: performance of a contract (Article 6(1)(b) GDPR). You signed up to be told.
• Marketing emails about pre-orders and launch: consent (Article 6(1)(a) GDPR). You ticked the box. You can unsubscribe at the bottom of any email.
• Statistics cookies (page views, button clicks): consent. We only set them if you accept Statistics in the cookie banner.
• Marketing cookies (Meta Pixel for ad measurement): consent. Only set if you accept Marketing.
• Security logs (IP, user agent, request timestamps): legitimate interest (Article 6(1)(f) GDPR) in keeping the site online and free from abuse.

4. Who processes your data (subprocessors)

We use a small number of vendors to make Reetle work. Each one only sees what it needs:

• SendGrid (Twilio Inc., US): sends the welcome email and any future launch updates. Receives your email address only.
• Cloudflare (Cloudflare Inc., US): sits in front of the site for DDoS protection and edge caching. Sees every request (IP, user agent, URL).
• Google Analytics 4 (Google LLC, US): aggregate page-view analytics. Only loaded if you accept Statistics cookies. Receives a pseudonymous browser identifier and your page-view events, not your email.
• Meta Pixel (Meta Platforms Inc., US): measures whether our ads work. Only loaded if you accept Marketing cookies. Receives a browser identifier and the events you triggered, not your email.

We do not currently use a third-party Consent Management Platform (Cookiebot, Iubenda, OneTrust, etc.); the consent banner is built and hosted in-house. We do not currently use a live-chat vendor (Crisp, Intercom, etc.); chat lands in Sprint 3.

For US-based subprocessors, transfers rely on Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

5. How long we keep it

Waitlist data (your email, country, UTM, consent record) is kept until you unsubscribe or until 24 months pass without you opening one of our emails, whichever comes first. After that, the row is deleted from our database and from SendGrid.

Security logs (IP, user agent) are kept for 90 days, then deleted.

Analytics data in Google Analytics follows the 14-month retention setting we configured in GA4.

6. Your rights

You have the following rights under GDPR. To use any of them, email support@reetle.eu with the request.

• Access. Ask for a copy of everything we have on you. We respond within 30 days.
• Rectification. Ask us to correct anything inaccurate.
• Erasure. Ask us to delete your data. We will, unless we are legally required to keep it (very rare for waitlist data).
• Restriction. Ask us to stop processing your data while you sort something out (e.g., a dispute).
• Portability. Ask us to send your data to you (or to another service) in a machine-readable format.
• Objection. Object to legitimate-interest processing, including direct marketing.
• Complaint. File a complaint with your local data protection authority if you think we are mishandling your data.

7. Cookies

The full list of cookies we set, what they do, and how to change your preferences lives on the cookies page.

8. International transfers

Reetle is based in the EU. Where a subprocessor (SendGrid, Cloudflare, Google, Meta) is in the US or another country outside the EEA, we rely on Standard Contractual Clauses approved by the European Commission, and on the EU-US Data Privacy Framework where the vendor is certified under it.

9. Updates to this policy

When we change this page, we update the "Last updated" date at the top and, for material changes, send a one-time email to the waitlist. We do not silently change retention periods or add new subprocessors without notice.

10. Contact

Privacy questions, data requests, complaints: support@reetle.eu. General questions: hello@reetle.eu.