Privacy policy
Last updated: 28 October 2026.
Who we are
TumblerKey is run by Matteo Haghel (“we”), the controller of the personal data described here. Contact: hello@tumblerkey.dev or matteo.haghel@gmail.com.
What we collect
- Your email address.
- The platform you deploy on (for example Railway or Vercel), which you pick in the form.
- The date and time you agreed to hear from us, and the date you signed up.
Our hosting provider may process technical data such as your IP address in its server logs. We also keep your IP address in server memory for a few minutes to limit repeated submissions; it is not written to our database. We use DataFast, a privacy-focused analytics service, to count visits and see which pages and sources bring people to the site. It sets a first-party cookie to recognise returning visitors and records page views, referrer, country and device type. We do not use advertising trackers.
Analytics and cookies
The analytics cookie only measures how the site is used. You can block it in your browser settings or with a content blocker, and the site works the same without it.
Why we use it, and on what basis
We use your email only to tell you about the TumblerKey launch and to contact you about the product. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by ticking the box on the form. We use your deployment platform to decide what to build first.
Who processes it for us
- Railway, which hosts the website and the database that stores the waitlist.
- DataFast, which provides website analytics.
- Resend, which sends us an internal notification email when someone signs up.
These providers act on our instructions and may process data outside the European Economic Area under standard contractual clauses or equivalent safeguards. We do not sell your data and do not share it for advertising.
How long we keep it
Until you ask us to remove it, or until 12 months after the launch if you are still on the list, whichever comes first. If we decide not to launch, we delete the list within 12 months of sign-up.
Your rights
You can ask us at any time to access, correct or delete your data, to restrict or object to its use, or to receive a copy of it. You can withdraw your consent whenever you like, without affecting what we did before. Write to hello@tumblerkey.dev and we will reply within one month. If you think we handle your data unlawfully, you can complain to your local data protection authority (in Italy, the Garante per la protezione dei dati personali).