Your email belongs to the waitlist—not your Piece record.

Information used

• Your normalized email address and confirmation status.
• The date and version of your consent.
• A limited source label, such as homepage or QR test card.
• Confirmation and unsubscribe timestamps.

Separation and security

• Waitlist data is separate from Piece ID, QR credentials and owner records.
• Only hashes of confirmation and unsubscribe credentials are stored in production data.
• The public website cannot list or export waitlist addresses.
• Joining does not create a Piece owner account or guarantee availability.

Confirmation and withdrawal

You are counted on the waitlist only after confirming your email. Every waitlist email must include an unsubscribe option. Unsubscribing stops future waitlist and launch updates.

Data controller and contact

The data controller is Hlífar Vilhelm Helgason. Questions or requests about your information can be sent to icelandiclava1@gmail.com.

Retention and deletion

• Unconfirmed registrations are deleted after 7 days.
• Confirmed registrations are kept until the launch-notification purpose ends, and never longer than 12 months after confirmation.
• Unsubscribing stops email immediately. The email address and signup record are deleted within 30 days.
• A non-readable suppression hash may be kept for up to 24 months to prevent accidental future email.
• Rate-limit security records are deleted after 48 hours.

Service providers and your rights

Supabase stores the waitlist records and Resend delivers the emails. You may ask for access, correction or deletion, withdraw consent at any time, or complain to Persónuvernd, the Icelandic Data Protection Authority. We normally respond to rights requests within one month.