Privacy Policy

1. What we collect

For the waitlist, we collect exactly one thing: the email address you type into the form. Alongside it we store the time you submitted, which section of the page you submitted from, and a truncated user-agent string used to distinguish real browsers from scripted submissions.

We use Google Analytics to count visits and see which pages people read. It sets cookies in your browser and sends Google a record of the pages you view, along with your approximate location and device type. We use it to know whether anyone is finding this site. We do not use advertising cookies, remarketing, session replay, or anything that records what you type.

If you would rather not be counted, any content blocker or your browser's Do Not Track setting will stop it, and nothing on this site breaks when it is blocked.

2. Where it is stored

The site is hosted on Vercel, and waitlist signups are sent to a private Google Sheet that only we can read. That means Google processes your email address on our behalf, in addition to the analytics described above. Nobody else receives it.

If you are running this project yourself with no webhook configured, signups are instead appended to a newline-delimited JSON file at .data/waitlist.jsonl, which is excluded from version control and never leaves that machine.

3. What we do with it

We email you once when your batch of the private beta opens. That is the entire purpose. We will not add you to a newsletter, we will not send you product updates you did not ask for, and we will never sell, rent or share the list.

Every email we send contains a one-click unsubscribe that removes your address entirely rather than merely flagging it.

4. Anonymous posting

Inside the product, anonymous posts are decoupled from your account at the storage layer, not simply hidden in the interface. The post record holds a pseudonym identifier; it does not hold a foreign key back to your account, and there is no internal admin view that joins the two.

This means we genuinely cannot tell you who wrote an anonymous post, including when we would quite like to. That is the intended trade-off. Standard abuse handling operates on the pseudonym.

5. Your rights

You can ask us at any time for a copy of everything associated with your address, or ask us to delete it. Deletion is real deletion, meaning the record is removed rather than tombstoned, and we complete these requests within 30 days.

Depending on where you live you may have additional rights under the GDPR, the UK GDPR, or the CCPA. Exercising any of them costs you nothing and we will not ask why.

6. Children

Humanverse is not directed at anyone under 16 and we do not knowingly collect information from them. If you believe a minor has given us their email address, write to us and we will remove it.

7. Changes

If this policy changes in a way that affects what we collect or who receives it, we will email everyone on the waitlist before the change takes effect rather than quietly updating the date at the top of this page.