Privacy Policy

1. About StoicLabs

StoicLabs (stoiclabs.tech) is a personal software project — not a registered company. This policy is provided in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

2. What data we collect

We collect the following personal data:

• Email address — provided voluntarily when you join a waitlist.
• Signup source — the specific product page or form from which you joined (e.g. "homepage" or a product slug).
• Server logs — IP addresses and access metadata processed automatically by our hosting provider (Netlify) for security and service continuity. These are not collected by us directly.

We do not collect names, payment data, location data, or any sensitive categories of personal data.

3. Purposes and legal basis

• Waitlist management, product announcements, and project updates — legal basis: your consent (Art. 6(1)(a) GDPR). You provide your email specifically to be notified when a product launches. You may withdraw consent at any time.
• Service operation and security — legal basis: legitimate interest (Art. 6(1)(f) GDPR). Server logs are retained by Netlify to maintain service availability and detect abuse.

4. Data processors

We work with the following third-party processors who handle your data on our behalf, under written data processing agreements:

• Resend Inc. (United States) — email delivery and audience management. Your email address is stored in Resend's contact lists and used to send transactional and waitlist communications.
• Netlify Inc. (United States) — website hosting and CDN. Netlify processes server logs containing IP addresses and request metadata.

5. International data transfers

Both Resend Inc. and Netlify Inc. are based in the United States. Transfers of personal data to these processors are protected by Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. Additionally, Resend Inc. is certified under the EU-US Data Privacy Framework (DPF), providing a supplementary legal basis for transatlantic data transfers.

6. Retention periods

• Email address: retained until you unsubscribe, withdraw consent, or the waitlist for the relevant product is closed.
• Server logs: retained for approximately 30 days by Netlify in accordance with their standard data retention policy.

7. Data controller identity

In accordance with Art. 13(1)(a) GDPR and Art. 10 of Spanish Law 34/2002 (LSSI), the data controller responsible for processing your personal data is:

8. Your rights

Under the GDPR and the LOPDGDD, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — request that we limit how we process your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at admin@stoiclabs.tech. We will respond within 30 days.

You also have the right to lodge a complaint with the Spanish Data Protection Authority:

9. Cookies

We do not use analytical, advertising, or tracking cookies. Our use of cookies is limited to strictly necessary technical cookies. For full details, see our Cookie Policy.

10. Children

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their data, please contact us at admin@stoiclabs.tech and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our services after any changes constitutes acceptance of the updated policy.