Who we are
What we collect
From waitlist signups: email address; submission timestamp; anonymised IP (truncated to network prefix); browser user-agent string; coarse location derived from IP (country, city, region, timezone); device type, operating system, and browser; preferred language; referring URL.
From contact form submissions: all of the above, plus name (optional), company (optional), and message body.
Authentication cookies are set only on /admin. They are issued by Supabase Auth to maintain a session for authorised staff.
We do not use third-party analytics, advertising trackers, or cookies of any kind on public pages. We do not fingerprint devices, track across sites, or build advertising profiles.
How IP and location are handled
We receive your full IP address only briefly while processing your submission. We use it once to derive a coarse location (country, city, region, timezone) and then truncate it before storing — the last octet of an IPv4 address (or the last 80 bits of an IPv6 address) is discarded. The stored value cannot be tied back to a specific device.
When this site runs behind an edge platform (Vercel, Cloudflare), location is read from headers the platform already attaches; in that case no third-party lookup occurs at all. Otherwise, we call ipapi.co as a single-shot geolocation lookup with no logging or further processing on their side beyond the request.
Why we collect it (legal basis)
- Consent — by submitting a form you consent to us emailing you about LogSeal and storing the submission.
- Legitimate interest — to validate product demand, prevent spam and abuse, and respond to inquiries.
- Legal obligation — to keep limited records as required by applicable law.
Where it is stored and processed
Submissions are stored in Supabase (managed PostgreSQL) under row-level security. Supabase processes data on our behalf under their Data Processing Addendum. Transactional email is delivered through our SMTP provider. Geolocation lookups, when not provided by the edge platform, use ipapi.co. We do not sell, rent, or share personal data with any third party for marketing.
How long we keep it
Your rights
Under the EU and UK General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act (DPDP), and the California Consumer Privacy Act (CCPA), you have the right to:
- Access a copy of the personal data we hold about you
- Correct inaccurate data
- Export your data in a portable format
- Have your data deleted
- Withdraw consent at any time
- Object to processing based on legitimate interest
- Lodge a complaint with your local supervisory authority
Email privacy@welocalhost.com and we will respond within 30 days at no cost. For waitlist removal you can also reply to any email from us with the word remove.