Privacy policy

What we collect

When you join the waitlist, we store:

• your email address,
• the date and time you signed up, and
• which signup form on the site you used.

That's all. We don't ask for your name, and we don't store your IP address, device or browser details with your signup.

Visiting the site

Like any website, coldboot.app receives some technical information in order to work, such as your IP address and browser type. Our hosting provider, Cloudflare, processes it to deliver pages and protect the site from abuse. Some of it may appear in operational logs, which we use only to keep the site working and secure, not to identify you. This happens for every visitor and is separate from the analytics below.

We also use Cloudflare Web Analytics, which runs for every visitor whatever you answer about Google Analytics. A small script reports which page you opened, the site that sent you here, and how quickly the page loaded, so we can count visits and keep the site fast. It doesn't set cookies or store anything in your browser, doesn't fingerprint you, and Cloudflare discards your IP address rather than storing it with this data. It isn't linked to Google Analytics or to your email address.

Fonts are served from coldboot.app itself, so your browser doesn't contact a font service. There are no advertising scripts.

Analytics

The first time you visit, we ask whether we may use analytics. Until you answer, and if you say no, none of what this section describes happens.

If you say yes, we use Google Analytics 4 to understand how the site is used. It runs through Cloudflare Zaraz, which serves the analytics script from coldboot.app rather than from a Google domain and passes the data on to Google from Cloudflare's network. Google Analytics records page views, along with the general information it collects about any visit, such as your approximate location, device type and the site that sent you here. We also send these events, and no others:

• waitlist_signup_started: you submitted a waitlist form, and which one.
• waitlist_signup_succeeded: the signup went through. The form parameter identifies which form you used.
• waitlist_signup_failed: it didn't, and whether the address was rejected or something failed on our end, and which form you used in the form parameter.
• outbound_link_clicked: you followed a link to another site, and where it pointed.
• theme_toggled: you picked Light, Dark or System.

Your email address is never sent to Google Analytics, in any form. The signup events record that a signup happened and whether it worked, never who it was for. Ad personalization is turned off for the data we send.

If the analytics script doesn't load in your browser, for example because it was blocked or was slow, the site sends the same events through our own server instead, and only if you said yes. With no analytics cookie to go on, our server makes a temporary identifier by scrambling your IP address, browser type and language setting together. We don't store that identifier separately, but Google receives and retains it with the analytics data. It isn't linked to your email address or an account. This should be rare, and we'd rather tell you it exists than leave it out.

Cookies and browser storage

Everything below is set for coldboot.app alone.

• analytics-consent (cookie, one year) remembers whether you said yes or no to analytics, so we don't ask on every page. It holds that answer and nothing else.
• zaraz-consent (cookie) is Cloudflare Zaraz's own record of the same answer, which it checks before loading analytics.
• _zaraz_consent (local storage) is another copy Zaraz keeps of that answer, as yes or no for analytics and for ads. We don't run ads, so the ads value is always no.
• cfz_google-analytics_v4 (cookie, up to one year) holds the identifier Google Analytics uses to recognise a returning browser. Only set if you said yes.
• cfzs_google-analytics_v4 (cookie, deleted when you close your browser) keeps track of your current visit. Only set if you said yes.
• coldboot-theme (local storage) remembers Light or Dark if you pick one with the theme switch. It's never sent to us, and picking System clears it.
• coldboot-waitlist-pending (session storage) is set only if you said yes to analytics and then submit the waitlist form. It holds which form you used, so the next page can record whether the signup worked, and that page deletes it straight away.

You can change your answer at any time with Cookie settings at the bottom of every page. Clearing this site's cookies also resets the identifier Google Analytics uses for you.

How we use your email address

We use your email address to tell you when ColdBoot is available, and after that to send occasional news about ColdBoot and other Toastbyte Studios products. We won't use it for anything else, and every email we send includes a link to unsubscribe.

If you're in the European Union or the United Kingdom, we rely on your consent, which you give by joining the waitlist. You can withdraw it at any time by unsubscribing or emailing us.

Who we share it with

We don't sell, rent or trade your email address, and we don't share it with anyone for their own marketing. We use service providers that handle it on our behalf, only to provide their service to us:

• Cloudflare hosts this site and the database the waitlist is stored in, runs Zaraz, which loads our analytics, and provides Web Analytics.
• Google receives the analytics described above, if you said yes. It never receives your email address. How Google uses data from sites like ours is explained at policies.google.com/technologies/partner-sites.
• An email delivery service will send our emails. We haven't chosen one yet, and we'll name it on this page before we send the first email.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or ourselves.

Where it's stored

The waitlist is stored with Cloudflare. Cloudflare runs a global network, so your information may be processed outside the country you live in, including in the United States.

How long we keep it

We keep your email address until you unsubscribe or ask us to delete it. When you do, we remove it from our list.

Google keeps analytics data according to the retention setting on our Google Analytics property. It isn't linked to your email address.

Your choices and rights

• Unsubscribe with the link at the bottom of any email we send.
• Email support@toastbyte.studio to find out what we hold about you, correct it, or have it deleted.

Depending on where you live, for example in the EU, the UK or California, the law may give you further rights over your personal information. Email us to use any of them and we'll respond within the time the law requires.

One limitation: analytics data isn't linked to your email address or to an account, so we can't look up which analytics events were yours in order to delete them. Saying no, or clearing this site's cookies, stops any more being collected.

Children

This site isn't directed at children under 13, and we don't knowingly collect their information. If you think a child has joined the waitlist, email us and we'll delete their address.

Changes to this policy

When we change this policy, we'll update the date at the top. If we make a significant change to how we use your email address, we'll tell you by email before it takes effect.

Contact

Toastbyte Studios, LLC
support@toastbyte.studio