Privacy notice

Effective 28 September 2026

What this notice covers

This notice describes the OwnPalate marketing site. It is not a description of the iPhone app's local product data. The app's local product data policy is separate from marketing-site email collection.

What Convex stores

Convex stores the marketing-site update list. For each submitted address it keeps a normalized email, update-list status, a separate research status, an optional research response, consent and withdrawal timestamps, and an opaque preference-token hash. Convex does not send email.

Vercel hosting and analytics

Vercel hosts the site. The production site uses Vercel Web Analytics to count page views. We remove query strings and fragments from the page URL before sending it, and do not send custom events, signup email addresses, or research responses. Vercel may also receive the referring URL supplied by your browser on the first page view.

PostHog page views

We also use PostHog to count production page views, without tracking clicks, form text, or session recordings. We do not identify visitors by their signup email or create person profiles. PostHog is configured not to store a persistent analytics identifier in your browser. Its cookieless visitor counts use a daily server-side hash of the IP address, user agent, and hostname; this does not make the request anonymous. We remove query strings, fragments, and referrer URLs from PostHog events before sending them. Neither analytics provider is loaded on Preview or development deployments. Signup and consent records stay in Convex, separate from page analytics.

No email delivery yet

No email delivery provider is connected, so the current system records interest but cannot send confirmation or update email until a provider is selected and this notice is updated.

How long information is kept

Active membership remains until withdrawal. Research response text is removed after 12 months. Withdrawal and suppression state is retained only to honor opt-out.

Withdrawing consent

Update-list consent and research consent can be withdrawn separately through same-browser preferences or the configured contact address. Email ownpalate@gmail.com if this browser cannot manage the subscription.