The short version
- The only personal data this site collects is the email address you type into the waitlist form, with the time you submitted it and which of the two forms you used.
- It sets no cookies, runs no analytics, and makes no third-party requests — the fonts are served from our own domain rather than Google's.
- We use it to tell you when a place opens up. We do not sell it, rent it, or pass it to advertisers.
- Ask us and we will delete it, without asking why. Contact details are below.
Who is responsible for it
The data controller is Gajanan Rathod, a sole proprietor trading as firstfoot, based in India. For anything in this policy, including deletion requests, write to gajanansr8@gmail.com — that reaches one person, and it is the same person who built the product.
What is collected, exactly
| Data | When | Why |
|---|---|---|
| Email address | When you submit the waitlist form | So we can contact you about availability |
| Submission time | Same moment | To work out the order of the list |
| Which form you used | Same moment | To see which part of the page works |
That is the complete list. We do not record your IP address, your browser, your device, or the pages you visited. An earlier version of this site stored the browser user-agent string alongside each signup; it was removed because nothing read it.
Our server temporarily holds the IP address of requests in memory to rate-limit the form against abuse. It is never written to disk, never stored beyond a minute, and never associated with your email address.
Why we are allowed to hold it
Consent, which you give by submitting the form. The page tells you what the address is for at the point you type it, and you can withdraw consent at any time by asking us to delete it. Withdrawing does not affect anything we did while consent was in place.
Who else sees it
The site runs on Cloudflare, which hosts it and stores the waitlist in a Cloudflare D1 database. They process it on our instructions, as our infrastructure provider, and for no other purpose.
If we notify ourselves of a signup by email, that email is sent by Resend, which sees the address in the message it delivers. Beyond those two, nobody — no advertising networks, no data brokers, no analytics companies.
Cloudflare is a US company and its network is worldwide, so your address may be stored or processed outside your country. That transfer relies on the provider's own standard contractual clauses. If this matters to you, ask before you sign up and we will tell you exactly where it sits.
How long it is kept
Until you ask us to delete it, or until the waitlist has closed and everyone on it has been contacted — whichever comes first. We are not building a mailing list to use later; if you never become a customer, there is no reason for us to keep your address and we will not.
Your rights
Wherever you are, you can ask us to show you what we hold, correct it, delete it, or send it to you in a portable form. Depending on where you live, some of these are legal rights rather than courtesies — under the UK and EU GDPR, and under India's Digital Personal Data Protection Act, they are enforceable.
- See it. We will send you every field we hold, which is three.
- Correct it. Mostly useful if you mistyped the address.
- Delete it. Done within seven days, usually the same day. No explanation needed and none asked for.
- Withdraw consent. Same thing as deletion, in practice.
- Complain. If we handle a request badly you can complain to your data protection authority — the ICO in the UK, your national authority in the EU, or the Data Protection Board in India. We would rather you told us first.
Write to gajanansr8@gmail.com from the address you signed up with, or tell us which address to look for.
Changes to this policy
If it changes materially — new data collected, a new processor, a new purpose — we will email everyone on the list before it takes effect rather than quietly updating the date at the top. The current version was last updated on 19 September 2026.
Related: how to report a security problem and what the endpoint does with your submission, and the terms.