Privacy policy

Stéphane Malho leads the Clear Drop project and determines the purposes of this website’s waitlist. For questions or requests about your personal data, email contact@cleardrop.app. Details of the entity that publishes the software will be added here when its commercialisation is organised.

When someone voluntarily joins the waitlist, the website processes their email address, selected operating system, language, the edition or editions they are interested in, signup status, dates needed for confirmation and unsubscribing, and the date and version of the consent notice they accepted. An address is added to the active list only after email confirmation.

To limit abuse, the server temporarily uses the IP address supplied by the infrastructure and the normalized email address as rate-limit keys. The database stores only their HMAC fingerprints, not the raw addresses, with a ten-minute expiry window; expired entries are deleted on subsequent requests. The form also uses Cloudflare Turnstile: when you submit it, Cloudflare processes technical signals needed for anti-bot verification and returns a token that the server validates. Our code does not send your email address to Cloudflare. Infrastructure log contents and retention depend on each provider’s settings.

The address is used to manage the signup request, send the confirmation link and, after confirmation, send information and announcements about Clear Drop, including launch news that may present the project’s offers. For people signing up in a personal capacity, signup and confirmation are an affirmative request to receive these messages; every email provides a simple unsubscribe method. Abuse prevention and service security rely on the legitimate interest in preventing automated signups and misuse, subject to the person’s rights.

Data is not sold or shared with partners for their own marketing. It is not used to create an advertising profile.

An email confirmation is required to activate a signup; its link is valid for 48 hours. A welcome email is sent after confirmation. Occasional project updates include a one-click unsubscribe link.

When a person checks the box and submits the form, the system records the date and version of the notice they accepted, as well as signup status and dates needed to manage confirmation and unsubscribing. The confirmation token is stored as a digest; the unsubscribe link is authenticated with a signature.

Necessary data is processed by the configured technical providers: Vercel for website hosting, Neon for the database, Resend for email delivery and Cloudflare for Turnstile anti-bot verification. Cloudflare states that it acts as a processor for verification and as a controller when improving bot detection, under its privacy addendum. These providers act under their applicable terms and agreements. People authorised to maintain the service may access data where necessary.

Data locations, subprocessors and any transfers outside the European Economic Area must be checked against the providers’ account settings and contracts; this policy does not assume they are absent.

• Cloudflare Turnstile Privacy Addendum

A confirmed address is kept until the person unsubscribes or the list is closed. A confirmation link for an unconfirmed signup expires after 48 hours. After unsubscribing, a minimal status record may be retained to honour the request not to receive further messages and prevent accidental re-subscription. Operational deletion and backup-purge periods will be specified as the service evolves.

Depending on applicable law, a person may request access, correction, erasure, restriction or portability of their data, and may object to certain processing. They can unsubscribe directly using an email link. For other requests, write to contact@cleardrop.app and identify the relevant address; additional information will be requested only if needed to verify identity.

In France, a complaint may also be submitted to the CNIL (cnil.fr). People in other countries may contact their local data-protection authority. This policy does not limit these rights.

The website does not use advertising or audience-measurement cookies. Language routing uses a preference cookie named CLEAR_DROP_LOCALE, configured to last one year. The browser may also remember the light or dark theme. Cloudflare Turnstile may process technical signals and use cookies strictly necessary for this security check; see its privacy addendum. If these practices change, this policy will be updated and any required choices will be offered.

The website uses technical measures suited to its architecture, including random confirmation tokens, storing token digests rather than raw confirmation tokens, signed unsubscribe links, shared request limiting and server-side anti-bot verification. These reduce certain risks but do not guarantee absolute security. No password is requested for the waitlist.

Document processing takes place on the device. Update checks and some licence features may require a network connection and exchange technical data; their exact operation and data must be described before sales open. The application does not automatically send the documents it processes to an AI.

The waitlist and website do not receive documents imported into the application, their contents or their mappings. A pseudonymized file a person chooses to export and transmit is their choice and is handled by the recipient service.

The version and update date appear at the top of this page. For questions or requests about your data, contact contact@cleardrop.app. Material changes will be presented on this page or by email where appropriate.