Privacy Policy
This website sets no cookies, uses no browser storage, runs no analytics, embeds nothing from anyone else, and serves its fonts from its own domain. It has one form: the waiting list.
If you only read this site, the only personal data involved is what is unavoidably handled to deliver a web page. If you join the waiting list or email us, we process what you send.
This policy covers the gostatus.io website and its waiting list. It does not cover the gostatus service used by invited teams.
Controller
The controller of your personal data under the General Data Protection Regulation (EU) 2016/679 is:
- Company
- GoBird OÜ
- Registry code
- 17311365
- Address
- Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Harju maakond, Estonia
- Privacy contact
- [email protected]
We have not appointed a Data Protection Officer, and are not required to under Article 37 GDPR. Privacy questions go to the address above and are answered by us directly.
Delivering this website
Requests to gostatus.io pass through Cloudflare, which carries traffic to our servers and protects them from abuse. To do that, Cloudflare processes technical details of each request. Our own web server for this site does not write an access log.
What is processed
- IP address of the requesting device
- Date and time of the request
- The page or file requested, and the HTTP status returned
- Browser and operating system, as reported in the user-agent string
- Referring page, where the browser sends one
Why
To deliver the site, keep it available and secure, and recognise and stop abuse such as automated attacks.
Legal basis
Article 6(1)(f) GDPR, our legitimate interest in operating a functioning, secure website. We do not use this data to build profiles, and we do not try to identify individual visitors.
The waiting list
What we store
- The email address you enter
- Where on the site you joined, for example the home page
- The date and time you joined
- A one-way SHA-256 hash of your IP address. We never store the IP address itself.
Your IP address is also held in memory, for up to about fifteen minutes after your last request, to limit how many signups can come from one address. It is not written to disk.
What we send
One email to confirm that you are on the list, and later an email when a place is available for you. We do not send newsletters or marketing to waiting-list addresses.
Why
To confirm your place and tell you when you can start using gostatus, and to keep the form free of abuse.
Legal basis
For your email address, Article 6(1)(b) GDPR: steps you asked us to take before a possible contract. For the IP hash and rate limiting, Article 6(1)(f) GDPR: our legitimate interest in keeping the form free of abuse.
How long
We keep your entry until you have been invited or the waiting list closes, or until you ask us to remove it, whichever comes first.
If you write to us
When you send us an email, we process your address, whatever name you sign with, and the content of the message.
Why
To read your message, answer it, and keep a record of the correspondence.
Legal basis
Article 6(1)(f) GDPR, our legitimate interest in responding to people who contact us. Where your message concerns a contract or steps taken before entering one, Article 6(1)(b) GDPR.
How long
We keep correspondence for as long as the matter is open and for a reasonable period afterwards, in case it comes up again. Where a message forms part of an accounting record or documents a contractual obligation, we keep it for as long as Estonian bookkeeping and limitation rules require. Otherwise we delete it once it no longer serves a purpose.
What we do not do
- We set no cookies on this site and use no local storage.
- We run no analytics, no tracking pixels, and no session recording.
- We show no advertising and use no advertising networks.
- We load no fonts, scripts, styles, images or embedded media from third-party servers. Everything on the page comes from our own domain.
- We carry out no profiling and no automated decision-making within the meaning of Article 22 GDPR.
- We do not sell, rent or trade personal data, and we never will.
Because we set no cookies and no non-essential trackers, there is no consent banner. There is nothing to consent to.
Who else sees it
We share personal data only with service providers that process it on our behalf. Cloudflare carries traffic to this website, as described above. The waiting list is stored in a database on infrastructure we operate, and waiting-list emails are sent through the mail server we use for gostatus.
Beyond that, we disclose personal data only where the law requires it, for example to a court or a competent authority acting within its powers.
Transfers outside the EEA
Where a service provider stores or accesses data outside the European Economic Area, the transfer is covered either by a European Commission adequacy decision or by the Commission's Standard Contractual Clauses together with any additional measures the transfer requires. You can ask us which applies at any time.
Your rights
Under the GDPR you have the right to:
- Access: ask whether we hold personal data about you and receive a copy.
- Rectification: have inaccurate data corrected and incomplete data completed.
- Erasure: have data deleted where one of the grounds in Article 17 applies, including leaving the waiting list.
- Restriction: have processing limited while a dispute about it is resolved.
- Portability: receive data you provided in a structured, machine-readable format.
- Object: object at any time to processing based on legitimate interest, on grounds relating to your situation.
Write to [email protected]. We answer within one month, as Article 12(3) requires; if a request is genuinely complex we may extend that and will tell you why. Exercising these rights costs nothing.
Complaints
If you think we have handled your data wrongly, tell us first. We would rather fix it. You can also complain to a supervisory authority at any time. Ours is:
- Authority
- Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)
- Address
- Tatari 39, 10134 Tallinn, Estonia
- Website
- www.aki.ee
If you live in another EU or EEA country, you may complain to the supervisory authority there instead.
Children
This website is not directed at children and we do not knowingly collect their personal data. If you believe a child has sent us personal data, write to [email protected] and we will delete it.
Changes
If how we handle personal data changes, we update this page and change the date at the top. We do not make changes retroactively, and we do not quietly widen what we collect.