DragDrop is pre-launch. This website collects personal data in exactly two places you fill in yourself, the waitlist signup and the contact form, plus optional Google Analytics that runs only if you opt in through the cookie banner. There are no advertising trackers and nothing loads without your consent. This policy explains what we collect, why, and how you stay in control of it.
1.Who we are
2.What we collect
We collect personal data in three places, two of them only when you actively give it to us:
- Waitlist signup: your email address, the signup status, the page on our site the signup came from, the version of the consent text you agreed to and when you agreed to it, the unsubscribe token we generate, and timestamps. We do not store IP addresses with your waitlist record.
- Contact form: your name, your email address, an optional company name, an optional topic, and your message.
- Analytics, only with your consent: if you opt in through the cookie banner, Google Analytics collects usage data such as the pages you visit, how you arrived, your approximate region, and device and browser type. IP addresses are anonymized and advertising features are disabled. If you do not opt in, the analytics script is never loaded and none of this is collected. See our Cookie Policy for the full details.
That is the full list. We do not collect precise location data, and we do not enrich what you give us with data from anyone else.
One technical exception: to protect these forms from abuse, we process your IP address transiently in server memory for rate limiting. It is never written to the database and never used for any other purpose.
3.Why and legal basis
- Waitlist: we use your email to send you a welcome email and updates about DragDrop and your place in line for access. The legal basis is your consent (GDPR Article 6(1)(a)), given through an explicit, unticked checkbox at signup. You can withdraw consent at any time (see section 8).
- Contact form: we use what you send us solely to answer your message. The legal basis is our legitimate interest in responding to inquiries addressed to us (GDPR Article 6(1)(f)). Contact form data is never used for marketing.
- Analytics: we use aggregated usage data to understand which pages work and where visitors get stuck. The legal basis is your consent (GDPR Article 6(1)(a)), given through the cookie banner. You can withdraw it at any time via Cookie settings in the footer, which stops measurement immediately and deletes the analytics cookies.
4.Waitlist emails
6.International transfers
7.Retention
- Waitlist data is kept until public launch onboarding completes, or until you unsubscribe or ask us to delete it, whichever comes first. It is then deleted.
- Contact form data is kept only as long as needed to handle your inquiry, then deleted.
- Analytics data is retained in Google Analytics for 14 months and then deleted automatically. Withdrawing consent stops collection immediately and deletes the analytics cookies from your browser.
8.Your rights (GDPR)
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data rectified;
- have your data erased;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw consent at any time: click the unsubscribe link in any email we send, or email privacy@dragdrop.studio. Withdrawing consent does not affect processing that happened before you withdrew.
To exercise any of these rights, use the unsubscribe link or email privacy@dragdrop.studio. Erasure requests are honored the same way. You also have the right to lodge a complaint with a supervisory authority; in Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).
9.Your rights (CCPA/CPRA)
If you are a California resident, you have the right to:
- know what personal information we collect and how we use it (it is all listed in this policy);
- delete your personal information;
- correct inaccurate personal information;
- opt out of the sale or sharing of personal information.
We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. See our Do Not Sell or Share My Personal Information page. We will never discriminate against you for exercising your privacy rights. To exercise any CCPA right, email privacy@dragdrop.studio; we verify requests using the email address we have on file.