Legal

Privacy Policy

Last updated 17 September 2026

This site does one thing with your data: if you join the waitlist, it keeps your email so we can tell you when Acylic is ready. This page spells out the details — what's collected, who handles it, and how to have it removed.

Who we are

Acylic is made by an individual based in Spain. For the purposes of the GDPR, that person is the data controller for anything collected through this site. You can reach us at hello@acylic.dev.

What we collect, and why

The waitlist

When you join the waitlist we store your email address and the time you signed up. That's all the form sends. We use it for one purpose: to email you when the first build of Acylic is available. We won't add you to any other list or send you unrelated marketing.

The legal basis is your consent (GDPR Article 6(1)(a)), which you give by submitting the form. You can withdraw it at any time by emailing us; we'll delete your address and you won't hear from us again.

Bot protection

The waitlist form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than a script. To do that, Cloudflare receives your IP address and some technical characteristics of your browser. We don't see or store this data ourselves. The legal basis is our legitimate interest (Article 6(1)(f)) in keeping the waitlist free of spam and abuse.

Serving the site

The site is hosted on Cloudflare. Like any web host, Cloudflare processes the IP address and request details (page requested, browser, time) of every visit in order to deliver the page, defend against attacks, and enforce a rate limit on the signup form. This is again based on our legitimate interest in running a secure site.

Analytics

We use Cloudflare Web Analytics to see how many people visit and which pages they view. It is privacy-first by design: no cookies, no fingerprinting, no tracking across other sites, and the reports we see are aggregate counts (page views, referrers, countries, browsers), not individual profiles. Legal basis: legitimate interest in understanding whether the site works.

Fonts

The site's typeface is loaded from Google Fonts. When the page loads, your browser requests the font files from Google's servers, which means Google receives your IP address as part of that request. Google states it doesn't use these requests to track or profile users; see Google Fonts' privacy notes.

When you contact us

If you email or message us, we keep the conversation for as long as needed to reply and follow up. Messages sent on Instagram or X are also subject to those platforms' own privacy policies.

Who we share it with

We don't sell your data or share it for advertising. The following services process it on our behalf:

• Cloudflare, Inc. (US) — hosts the site, stores the waitlist in its database, runs the bot check and analytics.
• Discord Inc. (US) — each new signup posts a short notification containing the email address to a private Discord channel that only we can see, so we know the waitlist is growing.
• Google LLC (US) — serves the font files, as described above.

We may also disclose data if the law requires it. Nobody else receives it.

International transfers

The providers above are US companies, so your data may be processed outside the EU/UK. Each of them offers safeguards recognised under the GDPR for such transfers — the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses — and we rely on those.

How long we keep it

• Waitlist entries (and their copies in the Discord channel) are kept until Acylic launches and the launch email has gone out, then deleted — or earlier, as soon as you ask.
• Bot-check and hosting data is held by Cloudflare for a short period under its own retention rules; we don't keep a copy.
• Analytics are aggregate and can't be traced back to you.
• Correspondence is kept for as long as needed to deal with your message.

Your rights

Under the GDPR (and UK GDPR) you can ask us to:

• access the data we hold about you;
• correct it if it's wrong;
• delete it;
• restrict or object to how we use it;
• receive a copy of it in a portable format;
• withdraw consent at any time, without affecting anything done before.

Email hello@acylic.dev from the address you signed up with and we'll act on it within a month. If you think we've handled your data unlawfully, you also have the right to complain to your local data protection authority (in the UK, the ICO).

Cookies

This site sets no cookies of its own, and neither does the analytics. Cloudflare's bot check may store a small amount of data in your browser for the duration of the check; it isn't used to track you.

Security

The site is served over HTTPS only, the waitlist database is accessible only to us, and the form rejects anything that fails the bot check or the rate limit. No system is perfect, but the data at stake here is a list of email addresses and we treat it with that in mind.

Children

The site isn't aimed at children and we don't knowingly collect data from anyone under 16. If you think a child has joined the waitlist, email us and we'll remove the entry.

Changes to this policy

If the site starts doing something new with your data, this page will be updated and the date at the top will change. Nothing that materially changes how the waitlist is used will happen without telling you first.

Contact

Questions about any of this: hello@acylic.dev, or see the other ways to reach us.