Minimal data for a minimal request.

What the request collects

• the email address you provide;
• your affirmative consent timestamp;
• the request timestamp and source; and
• a limited invitation state needed to operate the closed beta.

A single-use Turnstile token is sent for server-side validation but is not stored. The request path does not intentionally store raw IP addresses, user-agent strings, referrers, names, target URLs, credentials, card data, or customer site details.

Why it is used

The email and invitation state are used only to evaluate fit, prevent duplicate requests, contact selected beta participants, operate the invitation queue, and respond to privacy or deletion requests. They are not used for third-party advertising or sold as a contact list.

Retention and deletion

Uninvited pending requests are removed after no more than 90 days. Earlier deletion is supported. Invited participants receive the separate product-data terms that apply before a workspace or monitor is created.

Public collection remains disabled until a verified deletion contact is configured and shown here.

Service boundaries

The planned request flow uses Cloudflare Pages and Turnstile for hosting and bot validation, plus Supabase for the access-request record. Server privileges stay server-side. No provider is represented here as configured or live until separate deployment evidence exists.

Security and changes

Access is restricted by server-side bindings and database policy. No online service can promise absolute security. Material changes to the data collected, purpose, retention, or processors require an updated notice before they take effect.