Privacy
What Waitlist stores
- The title and the description of your waitlist, and your name if you type it.
- The emails and the names that people type when they join. A name can be a first name only. Waitlist does not check it.
- A referral code for each person, and the code of the link that brought them.
- Two kinds of secret code, kept as a fingerprint (a SHA-256 hash). The server cannot read them. They are explained below.
Where, and for how long
The data is in a Cloudflare D1 database. The server deletes every waitlist, with all its emails, 30 days after the waitlist is made. Download the list before day 30. You can delete your waitlist sooner, with your manage link. A person can leave the list sooner too.
Who can see the emails
Only the person who made the waitlist can see the emails and the names. Other people see how many people are on the list. A person who joined sees their own place and the number of friends who joined from their link. Nobody sees the email of another person.
What Waitlist does not do
- No cookies.
- No tracking, and no ads.
- The server does not store IP addresses, and does not log them.
- The server does not put emails in its logs.
- Waitlist does not send emails.
- If the page has an error, it sends an error report. The report has no email, no name and no secret code.
The manage link and the edit code
When you make a waitlist, you get a manage link. It has a secret code after the # sign. Browsers never send that part to a server. The page reads it and sends it in a header, only to this site, when you ask for the list. Your device also keeps it in its local storage, so the waitlist opens as yours on this device. Anyone who has the manage link can manage the waitlist. We cannot send it to you again.
When a person joins, the server gives their device a secret edit code and the referral code. The device keeps them in local storage. With them the person sees their place and can leave the list.