Legal
Privacy Policy
The short version: we only get your email address if you give it to us on purpose, we never sell or share it, and every email we send can be left with one click.
Who is responsible
Ondervale ("we", "us") is the controller for all personal data described here. Postal address pending registration — see the imprint for current details. Contact for everything privacy-related: hello@ondervale.com.
What we collect
- Email address — only when you type it into an early-access or worksheet form on one of our pages. That is the entire extent of intentional collection.
- Usage data — page views and named button clicks are counted by a first-party, cookieless beacon on this site (
POST /collect): no cookies, no local storage, no fingerprinting, no cross-site tracking, no third-party trackers. Your IP address is hashed with a daily salt and truncated at the server edge and is never stored in readable form; we keep counts, not profiles. - Nothing else. No advertising pixels, no social-media trackers, no profiling.
What we do with it
Your email address is used to send you updates about exactly the product you asked about (early access, worksheets you requested). The lawful basis is your consent, recorded with the form version you saw. You can withdraw it at any time — see below. We never sell, rent, or share your address with third parties.
Where data lives
Form submissions go to our own lead store hosted in the EU on infrastructure we control. Nothing is passed to advertising networks or data brokers.
Your rights
- Access — write to us and we will tell you what we hold about you.
- Erasure — ask and we delete your address from every list.
- Unsubscribe — one click in every email, no exceptions. Unsubscribing also counts as an erasure request unless you tell us otherwise.
- You may additionally lodge a complaint with your local data-protection authority.
How long we keep it
Until you unsubscribe or ask for deletion, whichever comes first. Addresses that hard-bounce repeatedly are removed automatically.
Changes
If this policy changes materially, we will not silently re-purpose existing addresses — new consent is asked before new kinds of email are sent.