Your data on the Crux waitlist
LAST UPDATED · 17 June 2026
This notice explains what happens to the email address you give us when you join the Crux waitlist at usecrux.io. It is deliberately short because we collect very little.
Who we are
The data controller is Lumitrope Labs Ltd [company no. and registered address — to be completed], a company registered in [England & Wales]. For any privacy question or request, email privacy@usecrux.io.
What we collect, and why
- Your email address — so we can send you one email when Crux launches.
- A consent record — the wording you agreed to and the time you agreed, so we can show your consent was freely given.
- Your IP address and browser user-agent — captured at sign-up to prevent abuse and as part of the consent record.
- Confirmation status and timestamps — to run the double opt-in and avoid emailing unconfirmed addresses.
We do not collect names, payment details, location beyond the IP, or any tracking/advertising data. We do not use third-party analytics or advertising cookies on this site.
Lawful basis
We process your email on the basis of your consent (UK GDPR / EU GDPR Art. 6(1)(a)), given when you submit the form and confirmed when you click the link in the confirmation email (double opt-in). You can withdraw consent at any time — see “Your rights” below.
How long we keep it
We keep your email until the launch email has been sent and the waitlist is wound down, or until you ask us to remove it — whichever comes first. Addresses that never complete the confirmation step are removed within a reasonable period.
Who we share it with (our processors)
We don’t sell your data or share it for marketing. We use a small number of processors purely to run the waitlist:
- Supabase — stores the waitlist database (EU region).
- Resend — sends the confirmation and launch emails.
- Vercel — hosts the website and serverless functions.
Each is bound by its own data-processing terms. Where data is transferred outside the UK/EEA, it is covered by appropriate safeguards (e.g. Standard Contractual Clauses).
Your rights
Under UK and EU GDPR you can ask us to: access the data we hold on you; correct it; delete it; restrict or object to its use; and port it. You can also complain to a supervisory authority (in the UK, the ICO at ico.org.uk).
The fastest way to remove yourself is the “Remove me” link in any email we send, or the unsubscribe page — that deletes your record immediately. For anything else, email privacy@usecrux.io and we’ll respond within one month.
Changes
If this notice changes, we’ll update the date above. Material changes affecting how we use your email will be notified to you directly.