Privacy statement

Who is responsible

Table42 is run by Tim Gelhard in Utrecht, the Netherlands. For anything about your data — questions, corrections, or deletion — email [email protected] and a real person will answer.

What we collect, and why

When you join the waitlist we store only what we need to contact you and to show that you agreed:

• Your email address — so we can tell you when testing opens. It is the only required field.
• Your language (English or Dutch) — so we write to you in the right one.
• Your consent — which version of this statement you agreed to, and the moment you did, so your sign-up is verifiable.
• Confirmation status — whether you clicked the confirmation link, and when. We send one email with a single-use link to make sure the address is really yours (double opt-in).
• Weekly updates — only if you tick that optional box. You can stop them at any time.
• Where you came from — if you arrive through a campaign link, the campaign tags in the address (UTM). This shows us which channels work; it is never used to build a profile of you.

Legal basis

We process your data on the basis of your consent (Article 6(1)(a) GDPR). You give it by ticking the box when you sign up, and you can withdraw it at any time — see “Your rights” below.

Cookies and analytics

We use only a couple of functional cookies — to remember your light/dark theme and your language. We do not use advertising or cross-site tracking cookies.

For visitor numbers we use Plausible Analytics, a privacy-friendly service hosted in the European Union (Germany). It is cookieless and counts visits only in aggregate: it sets no cookies, stores no personal data, and does not record or store your IP address, so it can never identify you or build a profile of you. Your email address is never sent to any analytics tool.

Where your data is stored

Your sign-up is stored in our database (Supabase) on servers in the European Union. Confirmation emails are sent through an email provider (Resend). We share your email with these providers only to run the waitlist — never with advertisers.

How long we keep it

We keep your sign-up until the Utrecht test launches and we have invited you, or until you ask us to remove it — whichever comes first. After the test phase we delete or anonymise sign-ups we no longer need.

Your rights

Under the GDPR you can, at any time, ask us to:

• show you what we hold about you;
• correct it if it is wrong;
• delete it (the “right to be forgotten”);
• withdraw your consent, which stops all further emails.

Withdrawing or unsubscribing

Email [email protected] and we will remove you from the list. While we are still small we handle these by hand, usually within a few days. If you believe we have mishandled your data, you can also complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).

Changes to this statement

If we change what we collect or why, we publish a new version and record it, so it stays clear which version you agreed to. The current version is shown at the top of this page.