1. Who we are
The controller responsible for your personal data is:
BuffBird OyBusiness ID 3603643-5
Helsinki, Finland
buffbirdbusiness@gmail.com
This policy covers the website at buffbird.eu and its launch waitlist. The BuffBird app will have its own privacy policy when it launches.
2. What we collect
When you join the waitlist
- Your email address. It is the only thing we ask you for.
- Which signup form you used (top or bottom of the page) and when you submitted it.
When you visit the site
Like any website, our hosting provider processes technical data needed to deliver pages and to keep the site and the form free of abuse: your IP address, browser and device details, and the pages requested. Form submissions are checked for spam using this technical data.
What we don’t do
The site sets no cookies and uses no analytics, advertising or tracking tools. Fonts and images are served from our own site, so visiting a page does not send your data to third parties such as font or video providers. Because nothing is stored on your device, there is no cookie banner.
3. Why we use it, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Emailing you when BuffBird launches | Email address, signup time, form used | Your consent, Article 6(1)(a) |
| Keeping the site secure and filtering spam signups | IP address, browser details, submission content | Our legitimate interest in running a secure service, Article 6(1)(f) |
| Answering you when you contact us | Your email and what you write | Our legitimate interest in replying, Article 6(1)(f) |
We will not use your email for anything else, and we never sell or rent it.
4. How long we keep it
We keep your waitlist email address until we have sent the launch announcement, and for no longer than 12 months after BuffBird launches. If you withdraw your consent or ask us to delete your address, we delete it without undue delay, and at the latest within 30 days. If BuffBird does not launch, we delete the whole list.
Technical logs kept by our hosting provider are deleted on its own short retention schedule.
5. Who else handles your data
We use a small number of service providers who process data on our behalf and under written agreements:
- Netlify, Inc. (United States): website hosting and storage of waitlist signups.
- Automattic Inc. (Akismet) (United States): automatic spam filtering of form submissions, used by Netlify.
- Google Ireland Limited (Gmail): our email inbox, where signup notifications and your messages to us arrive.
Some of these providers process data outside the European Economic Area. Where they do, the transfer is protected by the EU–U.S. Data Privacy Framework for certified providers or by the European Commission’s Standard Contractual Clauses.
If we use an email delivery service to send the launch announcement, we will add it here before sending.
6. Your rights
Under the GDPR you can ask us to:
- see the personal data we hold about you and get a copy of it;
- correct it if it is wrong;
- delete it;
- restrict or object to how we use it;
- receive it in a portable format.
You can withdraw your consent at any time. Email us at buffbirdbusiness@gmail.com, or reply to any email we send, and we will remove you. Withdrawing does not affect what we did before you asked.
We answer requests within one month. If you think we are handling your data unlawfully, you can complain to the Finnish supervisory authority, the Office of the Data Protection Ombudsman, or to the authority in the EU country where you live.
7. Everything else
Children
The waitlist is meant for people aged 13 and over. If you are younger, please do not sign up.
Security
The site is served only over an encrypted connection (HTTPS), and access to the waitlist is limited to the BuffBird team.
Automated decisions
We make no decisions about you based solely on automated processing, and we do not profile you.
Changes to this policy
If we change how we use your data, we will update this page and the date at the top. We will not use your email for a new purpose without asking you first.