Privacy notice

Last updated 7 July 2026

This notice explains how Croft Oy (“Croft”, “we”, “us”) collects and processes personal data through this website. Croft Oy is the data controller. For details of your rights under the EU General Data Protection Regulation, see our GDPR page.

What we collect

When you join the waitlist, we store the email address you provide, your consent and the time you gave it, the page you signed up from, a salted one-way hash of your IP address (we never store the address itself), and your browser’s user-agent string. The hash and user-agent exist solely to protect the waitlist against abuse.

To prevent automated abuse, your IP address is also processed transiently — in the same one-way hashed form — to rate-limit requests.

Where it lives

Waitlist data is stored in a database in the European Union (Frankfurt, Germany).

No cookies, no tracking

This site sets no cookies and runs no analytics, advertising, or tracking technology of any kind. Fonts and all other assets are served from our own domain, so visiting this site sends your data to no third party.

Why we use it

We use your email address to contact you about access to Croft and related updates, on the basis of your consent — which you can withdraw at any time. We process the security data described above on the basis of our legitimate interest in operating and protecting the Services.

Sharing

We do not sell personal data, and we never will. We share it only with the service providers that run the Services for us — hosting, database, email delivery, and security — under appropriate data-protection agreements, and where required by law.

Emails and unsubscribing

Every email we send includes a one-click unsubscribe link. Unsubscribing deletes your record from the waitlist immediately — we keep no copy.

Retention

We keep waitlist data until you unsubscribe or ask us to delete it, or until it is no longer needed for the purpose it was collected.

Your rights

You can request access to, correction of, or deletion of your personal data, and you can withdraw consent at any time, by contacting privacy@croft.fi. See the GDPR page for the full list of rights.

Contact

For any privacy question, write to privacy@croft.fi.