Privacy Policy

This Privacy Policy explains how Fjorder (“we”, “us” or “our”) collects, uses, stores, protects and erases personal data.
Fjorder is operated from the Netherlands. This Privacy Policy is primarily based on the requirements of the European Union’s General Data Protection Regulation (GDPR) and the Dutch Uitvoeringswet Algemene verordening gegevensbescherming (UAVG)

1. Who are we

Fjorder is a software project operated from the Netherlands by Youri Schijff. At this stage, Fjorder is not operated through a separate registered legal entity.
For any questions about privacy or your personal data, you can contact us at:
[email protected]

2. What personal data we collect

When you join the Fjorder waitlist we collect:
• Your email address
• The date and time you joined the waitlist
• Information required to verify your email
• Information required to maintain and secure our systems
We only collect personal data that we consider necessary to operate and maintain the waitlist.

3. Why we collect your personal data

We collect and use your personal data to:
• Verify that you provided a valid email address
• Confirm your place on the Fjorder waitlist
• Send you relevant emails about Fjorder
• Understand the overall growth and activity of the Fjorder waitlist
• Maintain, secure, and operate our website and infrastructure
• Respond to requests concerning your personal data
We do not sell your personal data, and we never will. Selling personal data is not part of Fjorder’s business model or our principles.

4. Aggregated information

We may use aggregated information about the waitlist activity to understand the overall development of Fjorder.
Where information is aggregated for analytical purposes, we aim to prevent the resulting statistics from identifying individual users.

5. Website and network infrastructure

We use Cloudflare for services including DNS, network security, and Cloudflare Tunnel.
When you access the Fjorder website, network and technical information may be processed by Cloudflare as necessary to provide and secure these services. This may include personal data such as IP addresses, request information, and other technical information associated with your connection.
Fjorder does not intentionally store IP addresses in its waitlist database unless this becomes necessary for security, operation, or legal purposes.
You can find more information about Cloudflare’s processing of personal data in its own privacy documentation.

6. Email delivery

We use Resend to send and deliver emails.
When an email is sent to you, Resend receives the information necessary to deliver that email, including your email address and the relevant email content and delivery information.
Resend processes this information on our behalf in connection with email delivery.
You can find more information about Resend’s processing of personal data in its own privacy documentation.

7. Email verification

When you join the waitlist, we send you a verification email.
The verification information is temporary and is used to confirm that you control the email address provided.
The verification information is normally retained for approximately one hour and is automatically removed after it expires. In exceptional circumstances, temporary verification information may remain for longer due to technical or operational issues.
After a successful verification, the temporary verification is erased, and your waitlist information is stored separately.

8. Data retention

We retain personal data for a period that is necessary for the purposes described in this Privacy Policy, subject to technical, operational, and legal requirements.
Our current retention periods are approximately:
• Unverified waitlist verification records: normally 1 hour
• Verified waitlist records: until the user requests deletion or the data is otherwise no longer necessary for the waitlist.
• Application and security logs: up to 30 days
• Backups: up to 30 days
• Other temporary technical information: up to 30 days
Backups may continue to contain encrypted copies of information for a limited period after the personal data has been removed from the active systems.

9. Data security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or disclosure.
Personal data stored by Fjorder may be encrypted at rest. We also use separate encryption keys for temporary and long-term storage.

10. Your rights

Depending on the applicable data protection law, you may have rights concerning your personal data, including the right to:
• Request access to personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your personal data
• Object to or request restriction of certain processing
• Withdraw consent where processing is based on consent
• Request information about how your personal data is processed
To exercise these rights, contact:
[email protected]
We may need to verify your identity before fulfilling a request concerning personal data.

11. Changes to this Privacy Policy

We may update this Privacy Policy when our services, infrastructure, or data processing activities change.
The latest version will always be made available on this page.
If we make significant changes affecting how we process your personal data, we will provide appropriate notice where required by applicable law.

12. Contact information

For any questions about privacy or your personal data, you can contact us at:
[email protected]

You also have the right to contact the relevant data protection supervisory authority regarding concerns about the processing of your personal data.
For Fjorder's activities in the Netherlands, the relevant supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).