Brainstein is operated by [LEGAL_ENTITY_PLACEHOLDER]. Reach us at hello@drinkbrainstein.com. We take your data seriously. Here's exactly what we do with it.
1. What we collect
When you join the waitlist, you give us your email address. That's it. We don't ask for your name, birthday, address, or anything else.
If you contact us, we collect what you send. Your message, your email, anything you choose to share.
When you visit drinkbrainstein.com, our hosting provider (Cloudflare) automatically logs basic technical data. IP address, browser type, pages viewed, time of visit. Standard server logs.
If we add analytics later, we'll use a privacy first tool that doesn't build personal profiles or track you across the web.
2. Why we collect it
Email. To send you product updates, founding cohort access, and launch news. That's it. No spam, no resale, no shady stuff.
Contact messages. To reply to you.
Server logs. To keep the site online, fast, and free of abuse.
Lawful basis under GDPR: your consent (when you join the waitlist or contact us), and our legitimate interest (running the site).
3. Who we share it with
We don't sell your data. Period.
We use a small set of processors to run the business.
- Cloudflare. Hosts the website and protects it from attacks.
- Resend (or equivalent email provider). Sends our waitlist emails. They process your email address only to deliver our messages.
Each of these companies is bound by data processing agreements and their own privacy commitments.
4. Where your data lives
Cloudflare and our email provider may process data outside the European Economic Area. When that happens, transfers are protected by Standard Contractual Clauses or equivalent safeguards approved under GDPR.
5. How long we keep it
Waitlist emails. Until you unsubscribe or ask us to delete them.
Contact messages. Up to 24 months after your last interaction.
Server logs. Up to 90 days.
6. Your rights
If you're in the EU, UK, or somewhere with similar laws, you have the right to:
- Access the data we hold about you.
- Correct anything that is wrong.
- Delete your data.
- Restrict how we use it.
- Object to certain uses.
- Take your data elsewhere (data portability).
- Withdraw your consent at any time.
- Lodge a complaint with your local data protection authority.
To use any of these rights, email us at hello@drinkbrainstein.com. We'll reply within 30 days.
7. Children
Brainstein is not for anyone under 18. We don't knowingly collect data from children. If you think a child has given us their data, email us and we'll delete it.
8. Cookies
We keep cookies to the bare minimum. We'll publish a separate Cookie Policy with the full breakdown.
9. Security
We use HTTPS everywhere. Our infrastructure is hosted on Cloudflare with industry standard encryption at rest and in transit. We won't ask you for sensitive data we don't need.
No system is bulletproof. If something happens, we'll tell you and the relevant authorities within the legal deadlines.
10. Changes to this policy
If we change anything important, we'll update the effective date at the top. If the change is material, we'll email anyone on the waitlist before it takes effect.
11. Contact
For anything privacy related: hello@drinkbrainstein.com.
This policy is provided in good faith. It is not legal advice. If you have a serious concern, contact your local data protection authority.