Website privacy

Who is responsible

The data controller is Filipe dos Santos Garrido, trading as KodeKrakan, at Rua 45, 10, 2DR TR, Areia, 4480-086 Árvore, Vila do Conde, Portugal.

For privacy questions or to exercise your rights, email filipe@kodekrakan.com.

Beta waiting list

We use your name, email, region, participation role and language to manage your interest in the beta and send invitations and communications about beta access. If you complete the optional organisation and message fields, we use that information to understand your interest. We also keep the consent notice version and the dates of your request and confirmation.

The legal basis is your consent (GDPR Article 6(1)(a)). After submitting the form, you receive an email to confirm your registration. The link is valid for 24 hours and contains the information needed for confirmation in encrypted form. You only join the list after opening the link and confirming on the page. Opening the link alone does not confirm your registration.

Fields marked as required are needed to handle this request. Signing up is voluntary and does not guarantee a beta place. You can withdraw consent at any time by emailing filipe@kodekrakan.com. Withdrawal does not affect the lawfulness of earlier processing.

Partnership enquiries

We use the name, email, region, participation role, organisation and message you submit, together with your language, to respond to and follow up on your enquiry. Optional fields are identified in the form. Sending a partnership enquiry does not add you to the beta waiting list.

This processing is based on our legitimate interest in responding to enquiries and assessing potential collaborations (GDPR Article 6(1)(f)). Where your request concerns entering into a contract with you, processing necessary for the pre-contractual steps you request is based on Article 6(1)(b).

Browsing and security

The hosting infrastructure may process your IP address, browser information, server requests and technical logs to deliver pages, resolve faults and prevent abuse. The legal basis is our legitimate interest in keeping the website available and secure (GDPR Article 6(1)(f)).

We store your language preference and visit analytics choice in your browser’s local storage. You can clear these preferences in your browser settings. We do not use advertising on this website. The website does not create app accounts, collect identity documents or request GPS location access. Your region is the one you enter in the form.

Visit analytics: only with your permission

If you accept, we use Google Analytics 4, provided by Google Ireland Limited, to understand how people find Stuck, which content they view and how they progress through the forms. The legal basis is consent (GDPR Article 6(1)(a)). Before acceptance, after rejection or after withdrawal, we send no analytics data to Google. You can accept or reject equally easily and continue browsing or using the forms.

Data includes pages and sections viewed, clicks, form steps and bounded error categories, accepted requests and observed sign-up confirmations, visit source and campaign, language, device and approximate geography derived by Google from the IP address. Google receives the IP for the connection, and states that it does not log or store IPs from EU, Swiss or UK visitors. We do not send names, emails, organisations, messages, entered regions or confirmation tokens. We do not use account identifiers, hashed emails, Google Signals, advertising, session recordings or cross-device identity linking.

After acceptance, GA4 uses first-party cookies (_ga and _ga_…) to distinguish browsers and sessions, lasting at most 180 days without automatic renewal. User and event data retention is configured to two months, without resetting on new activity. Aggregate reports can persist longer. We remember acceptance or rejection for 180 days. If the browser prevents saving the preference, your choice applies only to the current page.

You can open “Privacy preferences” in the footer and turn analytics off. Withdrawal stops new measurements and removes analytics cookies accessible on this site. It does not erase data already sent. This choice is separate from consent to the beta list. Analytics are incomplete and do not determine your waiting-list membership.

See how Google uses data from sites using its services and Google’s data processing terms, including provisions for international transfers.

Who receives the data

We use Vercel to host the website and run its forms, and Resend to send emails and store confirmed contacts on the beta list. Partnership messages are sent to filipe@kodekrakan.com and handled in the contact email inbox. These services and their supporting providers process the data needed for their role. We do not sell your data.

See the Vercel privacy notice and the Resend privacy policy.

International transfers

Providers may process data outside the European Economic Area, including in the United States. Their published agreements provide transfer mechanisms, including European Commission standard contractual clauses where applicable. See the Vercel data processing agreement and the Resend data processing agreement. To request information about the safeguards applicable to your data or a copy, email filipe@kodekrakan.com.

How long we keep data

We keep waiting list data while the beta invitation process continues or until you withdraw consent. The confirmation link’s 24-hour validity does not mean that the email and providers’ technical logs are deleted within that period.

To recover from email sending failures, we store email delivery jobs in a Vercel queue for up to seven days.

We keep partnership enquiries for as long as needed to follow up on the conversation. Technical and email delivery logs are subject to the relevant providers’ retention periods and settings. Where needed to comply with a legal obligation, demonstrate compliance or defend legal rights, we retain only the records necessary for that purpose and for the applicable period, without reusing them for invitations.

Your rights

Subject to the conditions in the GDPR, you can request access, correction, deletion, restriction of processing and portability of your data. You can object to processing based on legitimate interests on grounds relating to your particular situation, and withdraw consent for the beta list at any time.

Send your request to filipe@kodekrakan.com. We normally respond within one month. If a lawful extension is needed, we will explain why. We may ask only for the information needed to verify that the request is yours.

You can complain to Portugal’s Comissão Nacional de Proteção de Dados (CNPD) or another competent data protection authority without contacting us first. We do not make solely automated decisions with legal or similarly significant effects on you through this website.

Changes to this notice

We update this page when the website’s data processing changes. The date above identifies the published version. If a change requires fresh consent, we ask for it before using data for the new purpose.