Early Access privacy, explained clearly.

What we collect

The only information you provide through the Early Access form is your email address. Providing it is optional.

Submitting the form sends the address to Brevo so that it can deliver the double opt-in email. Until you use the confirmation link, the address is not added to the final Early Access list and the request is not treated as a confirmed application. Brevo records the submission attempt, the email delivery status and the confirmation events needed to operate and document that flow.

When the site is served, Netlify processes limited technical request data such as IP address, request time, requested URL and browser or device information. ROSALLAX uses Netlify Web Analytics to review aggregate site traffic from that server-side delivery data, including page views, daily unique visitor estimates and top pages.

ROSALLAX also uses the Umami Cloud client-side tracker on rosallax.com and www.rosallax.com. It records anonymous page views and navigation, including the page path and title, referrer, browser, operating system, device type, screen size, language, country-level location and UTM campaign parameters already present in the visited URL. ROSALLAX records two additional interaction events: clicks on an Early Access call to action, with a static placement label, and a successful Early Access form response. Neither event contains the email address or any form value.

These traffic measurements do not use cookies or browser storage. ROSALLAX does not use them for advertising, profiling or cross-site marketing tracking.

Why we use it

Your email and its confirmation status are used only to confirm and manage your ROSALLAX Early Access application and possible future Private Beta invitations. They are not used for a newsletter, recurring marketing, analytics, product authentication or automated access decisions.

Technical request and traffic analytics data is processed only to deliver and secure the site, diagnose failures, limit abusive submissions and understand how visitors reach and use the public pages.

Consent

The legal basis for the Early Access processing is your consent. Brevo sends a confirmation email, and your application is recorded only after you confirm. You can withdraw your consent at any time; this does not affect processing that took place before withdrawal.

Technical data needed to operate and secure the site, including limited traffic and interaction measurement, is processed on the basis of the controller's legitimate interests in providing a reliable and secure service and understanding use of the public site.

Who is responsible

The data controller is Michaël SERGÉ — ROSALLAX. Mike Grimes is the public name used by the founder of ROSALLAX.

Access is limited to the data controller, Brevo as the primary technical processor, and Brevo’s authorized subprocessors where necessary to provide the service.

Netlify is the technical hosting processor for the public site and may use authorized subprocessors to provide hosting, security and delivery services.

Umami Cloud is the technical provider for the client-side traffic and interaction measurements described above. Early Access email data is not sent to Umami Cloud.

Where processing may take place

Brevo is the primary email processor. Its authorized processing chain may involve countries outside the European Economic Area where necessary to provide the service. Brevo documents the relevant safeguards in its Data Processing Agreement, including adequacy decisions or standard contractual clauses where applicable.

Netlify is established in the United States and may process technical data in the United States and other countries through its authorized processing chain. Netlify states that it relies on recognized transfer mechanisms, including the EU–US Data Privacy Framework and standard contractual clauses where applicable.

Umami Cloud processes the limited analytics data described in this notice through its managed service. Its applicable service and data-processing terms govern that processing; ROSALLAX does not assert a project-specific processing region that has not been verified.

How long we keep it

A confirmed email address is kept for no more than 12 months after confirmation. It is deleted sooner if you withdraw consent, ask for the application to be deleted or the relevant Early Access or Private Beta program ends.

For an unconfirmed request, the confirmation link expires after 30 days and the address is not added to the final Early Access list. The related Brevo transactional logs are retained for one month. Automatic deletion after that period may take up to 24 hours to complete.

If a transactional log is deleted manually in response to a valid request, Brevo states that deletion may take up to 72 hours to complete.

ROSALLAX does not create a separate copy of hosting logs or analytics reports. Netlify retains technical data under its applicable service and data-processing terms and makes the configured aggregate traffic view available in its dashboard.

Umami Cloud retains analytics data under its current service settings and terms. ROSALLAX does not create a separate analytics archive or assert an unsupported fixed retention period.

Your choices and rights

You can ask to access, correct or delete your data, restrict its processing, receive the data you provided in a portable form, or withdraw your consent.

Send requests to rosallaxhq@gmail.com. When deletion is required, the address will also be removed from Brevo and valid requests will be relayed to the relevant processor where necessary. In France, you may also lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL).