Privacy

Short, because there isn't much to say.

Last updated: 28 July 2026.

Who is responsible

The data controller for this website and the early-bird list is the maker of Bandura. For anything privacy-related, write to [email protected] — it's read and answered by a human, not a ticket queue.

What we collect, and why

If you join the early-bird list: your email address, and — only if you choose to answer — which tool you currently use. That's the entire dataset. No tracking pixels in the emails, no enrichment, no third-party ad tech. The legal basis is your consent (GDPR Art. 6(1)(a)): the form says exactly what you'll receive — one or two launch emails — and submitting it is the consent. You can withdraw it at any time — see below.

Cookies

This site sets no cookies — none, not even "essential" ones — and stores nothing in your browser (no localStorage, no fingerprinting). Analytics, if enabled, is a privacy-preserving, cookie-free page counter: aggregate counts only, no personal identifiers, no cross-site tracking. There is no cookie banner because there is nothing to consent to; this section is the entire cookie policy.

How long we keep it

Your address stays on the list until the launch emails have gone out, or until you opt out or ask us to remove it — whichever comes first. When you opt out or ask, the address is deleted, not just suppressed. The list is not reused for anything after launch without asking you again.

Where it's processed

Signups are stored in Linear (linear.app), the U.S.-based issue tracker we already run the project in, which processes the list only on our instructions under GDPR data-processing terms. The website is served by Cloudflare, and the form submits through a small Cloudflare function that writes to Linear and keeps nothing itself. That's the complete list of processors; nobody else touches the data.

What we will not do

No selling, no sharing, no "trusted partners." The list exists to tell you when the product ships, and for nothing else — a short welcome note the moment you confirm, then one or two emails before launch.

Your rights, and getting off the list

Every email we send includes a working opt-out link. Beyond that, you have the right to ask what we hold about you (spoiler: an email address and maybe a tool name), to correct it, to have it deleted, to receive a copy of it, and to withdraw consent — write to [email protected] and it's handled promptly, by a human. If you're in the EU/EEA or UK and think we've handled your data badly, you also have the right to complain to your local data-protection authority — though we'd appreciate the chance to fix it first.

The product itself

Bandura the app is local-first by design: your flows are files on your machine, your API keys live in your OS keychain or your own .env, and nothing is sent to us. Any future telemetry will be strictly opt-in — that's a product principle, not a policy footnote.