Legal
Privacy Policy
Last updated 30 July 2026
This page explains what happens to the email address you give us, and nothing more is collected than what is described here.
Who is responsible
Exvall is operated by an individual, acting as the data controller for the personal data described below. You can reach the operator at hello@exvall.com, and full identifying details will be provided on reasonable request — including any request made to exercise the rights set out below, or by a supervisory authority.
What we collect
When you submit the form on this site, we store:
- Your email address, exactly as you typed it, lowercased.
- The time you submitted it.
- A short source label — the
utm_sourceorrefvalue in the link you arrived through, or the hostname of the site that referred you. This tells us where interest is coming from. It never identifies you.
We do not ask for your name, your company, or any payment details, and this site has no accounts to create. Your IP address is read when the form is submitted and held briefly in server memory — for no more than ten minutes — purely to stop one source from flooding the form. It is never written to our database and never linked to your email address.
Why we collect it, and on what basis
For one purpose: to send you a single email when Exvall opens access. The legal basis is your consent, given when you submit the form (Article 6(1)(a) GDPR). You can withdraw it at any time, and doing so is as simple as sending one message to the address above.
We will not send you marketing sequences, newsletters, or anything from a third party, and we will never sell, rent, or share your address with anyone for their own purposes.
How long we keep it
Until we have sent the launch notice, or until you ask us to delete it — whichever comes first. If the project is discontinued, or if no notice has been sent within 24 months of your signup, the record is deleted.
Who else processes it
We use two service providers, and only for the purposes described:
- Vercel Inc. — hosting and delivery of this website.
- Supabase Inc. — the database that stores the waitlist.
Both are established in the United States and may process data outside your country of residence. Each acts as a processor under contract and may only handle the data on our instructions.
Cookies and analytics
This site sets no cookies and runs no advertising or cross-site tracking. We use Vercel Web Analytics, which is cookieless: it records aggregate page views without building a profile of you and without following you to other sites. That is also why you were not shown a cookie banner — there was nothing to consent to.
Your rights
Where the GDPR or a comparable law applies to you, you have the right to:
- ask what we hold about you, and receive a copy;
- have it corrected if it is wrong;
- have it deleted;
- withdraw your consent, at any time;
- object to or restrict how we use it;
- lodge a complaint with your data protection supervisory authority.
Write to hello@exvall.com for any of these. We will respond within 30 days. There is no form to fill in and no reason you need to give.
Changes to this policy
If this policy changes, the date at the top of the page changes with it. If a change materially affects how we use an address already on the list, we will email everyone on the list before it takes effect.