Privacy
Last updated 13 August 2026 · applies to xyx.me as it exists today: a landing page and a waitlist.
Short version: reading this site is anonymous. Joining the waitlist is not — pressing the button sends us your email address plus a fairly detailed description of the device you pressed it on. Here is exactly what that means.
Reading the site
Loading any page here contacts nobody. There is no analytics, no advertising, no tracking pixel, no third-party script, no web font, and no embedded video. A small first-party preference cookie is set only if you choose a light or dark appearance; it remembers that choice for a year and is not used for tracking. You can verify this: open your browser's network panel and reload. The only requests are for this page, its stylesheet, and its first-party icon assets.
Two companies carry the traffic and keep ordinary server logs of it, as every web server does: Cloudflare, which sits in front of the site and therefore sees the IP address of every request, and Netlify, which hosts the pages. We do not build profiles from those logs. We mention Cloudflare specifically because "no third-party scripts" is not the same claim as "nobody sees your request" — someone has to deliver the page.
Joining the waitlist
Nothing is sent until you type an email address and press Get me in early. That asks us to add you to the xyx.me waitlist. We collect your email address and basic signup information, including your IP address, approximate location, device and browser details, language and timezone settings, referring page, and the time you signed up.
We use this information to run the waitlist, email you when the service opens, keep the service secure and prevent abuse, understand where early interest is coming from, and plan and test the initial release. We do not use it for automated decisions about you, advertising, or tracking you across other websites. We do not ask for precise location, contacts, photos, or payment details. If you do not want us to process this information, please do not join the waitlist.
| What | Where it comes from | Why |
|---|---|---|
| Your email address | You typed it | To email you once when we open. It is the entire point of the list. |
| Your IP address | Read by Cloudflare from the connection itself, as it delivers the request | Rough sense of where interest is coming from, and abuse investigation if the form gets hammered. |
| Approximate location — city, region, country | Cloudflare's estimate from that IP address | To know which places to launch in first. It is an educated guess from your network, not your device: it is often just the nearest large city, sometimes the wrong one, and it is never GPS. We never ask your browser for your real location, and no permission prompt appears. |
| Device, operating system, browser — with version numbers | Your browser's user-agent string | To know what to build and test for. |
| Screen size, window size, pixel ratio, touch support | Your browser | Same reason. It decides how much we care about small screens. |
| Timezone, UTC offset, language preferences | Your browser | Where and in what language to launch first. |
| CPU cores and device memory | Your browser | A rough floor for how heavy the eventual app can be. |
| Referring page | Your browser | To know which link brought you here. |
| The time you signed up | Our server | Ordering the list. |
That is more than most waitlists take, so we would rather say it plainly than bury it: combined, this is enough to recognise a browser. We collect it to build the right product, not to track you across the web — we have nowhere to track you to. If you would rather not hand it over, don't join the list; nothing else on the site asks for it.
Where it goes
- A private Google Sheet, one row per person, readable only by us.
- An email to us saying you signed up, containing the same details.
- A welcome email to you, sent through Google. It contains an unsubscribe link that works immediately.
The processors involved are Google (Sheets, Apps Script, and mail delivery), Cloudflare (delivers the site, and relays your signup so that the IP and rough location come from the connection rather than from a third-party lookup), and Netlify (hosting). If the relay is unavailable — an extension blocking it, say — the page falls back to asking ipify.org for your IP address; ipify then sees that request, but is never told your email or anything else about you. We do not sell, rent, share, or trade the list. There is no third party we hand it to.
Storage on your device
After a successful signup we write one key to your browser's local storage,
xyx.me:subscribed, holding the date you joined. Its only job is to
stop the form nagging someone who has already signed up. It expires after 120 days
and never leaves your device. If you choose a light or dark appearance, we also set
a first-party preference cookie and matching local-storage value to remember that
choice for up to one year. Neither is used for advertising or tracking. Clearing
site data removes them; private browsing normally discards them when the window
closes.
How long we keep it
Until the launch email goes out and a reasonable window after it, or until you ask us to delete it — whichever comes first. If xyx.me never launches, the sheet gets deleted rather than kept "just in case".
If you unsubscribe, we keep your address in a suppressed state rather than erasing the row, because that is the only reliable way to guarantee we don't email you again if you later re-enter it somewhere. Ask for full erasure and we will do that instead.
What you can ask for
- Leave the list — the unsubscribe page, or the link at the bottom of any email we send. It takes effect immediately.
- A copy of your row — ask and we'll send it.
- Correction or deletion — ask and we'll do it.
Depending on where you live these may be legal rights rather than favours. Either way the answer is the same: email [email protected] and we'll sort it out. No account, no form, no verification hoops beyond replying from the address in question.
Children
xyx.me is not intended for anyone under 16, and we don't knowingly keep their data.
Changes
When xyx.me becomes an actual exchange rather than a waitlist, this policy will need rewriting — profiles, asks, offers and messages all collect far more than an email address. We will publish the new version before any of that goes live, and email the list about it. This page always shows its own last-updated date.
Who we are
xyx.me is a small, early project — a flag in the ground rather than a company with a legal department. Questions about any of this go to [email protected] and a person reads them.