Privacy Notice

1. Who is responsible for your data?

The PawPaw project operator identified above is the data controller for beta waitlist registrations. You can contact us using the privacy email address listed above.

2. What information do we collect?

• Required registration details: nickname, email address, and where you heard about PawPaw.
• Optional contact details: Telegram, Instagram, WhatsApp and/or Discord account information that you choose to submit.
• Campaign information: UTM source, medium, campaign, content and term parameters, where present in the registration link.
• Registration details: submission date/time and an internal application identifier.
• Technical information: server and web-server security logs may include your IP address, request time, browser details and requested URLs, as part of normal hosting and abuse prevention.

3. Why do we use your data?

• To maintain the PawPaw beta waitlist and avoid duplicate registrations.
• To contact you about beta invitations, availability and essential beta participation updates via email or an optional contact method you provided.
• To understand which advertisements or referral channels bring people to the waitlist, using the source and campaign information you submit.
• To maintain the security of the site, detect spam and investigate service problems.

We do not use beta registration consent as permission to send unrelated promotional marketing. If we introduce a separate newsletter or other marketing, we will explain it and obtain any consent required.

4. Legal grounds under GDPR

For the beta waitlist and beta-related communications, we rely on your consent (Article 6(1)(a) GDPR), expressed when you submit the registration form and select its consent checkbox. You may withdraw that consent at any time by emailing us; withdrawal does not affect processing before it was withdrawn.

For essential server security, preventing abuse and maintaining the service, we rely on our legitimate interests (Article 6(1)(f) GDPR), subject to appropriate safeguards and balancing of your rights.

5. Is providing information required?

Your nickname, email and referral source are required to register for the beta waitlist. Telegram, Instagram, WhatsApp and Discord are entirely optional. Without the required fields, we cannot process your registration.

6. Where is your information stored and who can access it?

Beta registration entries are stored in a non-public file on our application server, with access limited to authorized project administrators and hosting operations as necessary. There is no public endpoint for downloading registrations. We use reasonable measures to restrict access, protect transmission using HTTPS and reduce unauthorized disclosure.

Our hosting provider may process technical data on our behalf. We do not sell or publish your waitlist information. We may disclose information when legally required or to service providers who need it to deliver the service under appropriate safeguards.

7. External services and international transfers

The landing page loads web fonts through Google Fonts. When your browser requests these files, Google may receive technical information such as your IP address. See Google's Privacy Policy. Your use of Telegram, Discord, Instagram or WhatsApp for subsequent communication is also subject to those services' privacy practices.

Data may be processed outside the European Economic Area if a service provider is located abroad. Where GDPR requires it, appropriate transfer mechanisms must be used.

8. How long do we keep your data?

We keep waitlist entries only as long as necessary to manage beta recruitment and invitations. Our defined retention period is [INSERT ACTUAL RETENTION RULE, e.g. until 12 months after the beta closes], unless a shorter period applies because you withdraw consent or request deletion, or a longer period is legally necessary. Server security logs are retained according to [INSERT LOG RETENTION PERIOD]. After the relevant period, data will be deleted or irreversibly anonymized.

9. Cookies, analytics and advertising

The beta form can record campaign parameters from the URL, such as utm_source and utm_campaign. This does not itself require placing tracking cookies on your device. At the time of this notice, the basic beta registration flow does not use non-essential advertising or analytics cookies. If we add tools such as Meta Pixel, TikTok Pixel or other analytics/advertising tracking, we will update this notice and implement consent controls where required before enabling them.

10. Your privacy rights

Under the GDPR, where applicable, you may request access to your personal data, correction of inaccurate details, deletion, restriction of processing, data portability and objection to processing based on legitimate interests. You may also withdraw consent at any time.

To exercise your rights, contact sanyamefik@gmail.com. We may ask for enough information to verify your identity. We will normally respond within one month, subject to applicable legal rules.

You also have the right to complain to a supervisory authority, including the Latvian Data State Inspectorate (Datu valsts inspekcija) if applicable, or another competent EU/EEA data protection authority.

11. Children

PawPaw's beta registration is not intended to collect personal data from children without the permission required by applicable law. If you believe a child submitted information without the necessary authorization, contact us so we can review and remove it as appropriate.

12. Automated decisions

We do not use your waitlist registration information to make decisions based solely on automated processing that produce legal or similarly significant effects on you.

13. Changes to this notice

We may update this notice as PawPaw develops. We will publish changes on this page and revise the “Last updated” date. If changes materially affect the purposes or legal basis for processing, we will provide additional notice or ask for consent when required.