Privacy

Privacy Policy

Last updated: April 20, 2026

Short version: we collect your email so we can tell you when Flush.io opens, and we count visits so we know where to spend our attention. That’s it. We don’t sell data, we don’t run ads, and we don’t use tracking cookies.

What we collect

Your email address. When you submit the waitlist form, on the main page or on an invite-only page, we store the address you typed along with the date and time of submission. We also attach a small amount of context from your visit (see below) so we know roughly where you came from.

Anonymous visit data. We use Umami Cloud to count pageviews and interactions (clicks, input focus, form submissions). Umami is a privacy-first analytics tool. It does not set cookies, does not store IP addresses, and does not track visitors across sites. We see aggregate numbers, not individuals.

Visit context. When the page loads, we note: the referring site (if any), any UTM parameters on the link that brought you here, your browser’s viewport width, the language your browser reports, and which variant of the page you saw. None of this identifies you personally.

Spam defense data. The form includes a hidden field that humans don’t see. If that field is filled, we treat the submission as automated, drop it, and do not add the address to our list.

We do not collect your name, phone number, IP address, physical address, payment information, or any sensitive category of data. We do not request access to anything on your device.

Why we collect it

Your email is used for one thing: to notify you when Flush.io launches, and occasionally to share a build note before launch. Every message includes a one-click unsubscribe link.

Visit context and analytics help us understand which sources drive interest (social, direct, press, word of mouth) so we can plan launch communication. We never connect analytics data to your email address.

Where we operate under the EU GDPR or UK GDPR, our legal bases are consent (for your email, which you provide by submitting the form) and legitimate interest (for anonymous analytics, which does not identify you).

Who we share it with

We use third parties to deliver these services. They process data on our behalf under their own privacy terms:

Loops, stores your email and delivers our launch announcement. Privacy policy: loops.so/privacy
Umami Cloud, collects anonymous analytics events. Privacy policy: umami.is/privacy
Cloudflare, serves the page. Does not receive your email or identify you.

We do not sell your data. We do not share it with advertisers or data brokers. We do not use it for profiling.

How long we keep it

We keep your email until Flush.io launches and for up to 12 months after, in case we need to re-send a launch note. You can ask us to delete it sooner at any time.

Umami retains analytics data for up to 12 months, after which it is deleted.

Cookies and local storage

We do not use tracking or advertising cookies. Umami is cookieless. We may set a single first-party storage key to remember small, non-identifying UI state (for example, whether you’ve dismissed a message on the page).

Your rights

You can, at any time:

See what we hold. Email us and we’ll tell you the exact record.
Correct it. Send the update and we’ll apply it.
Delete it. Email us and we’ll remove your address within 14 days.
Opt out. Every email we send includes a one-click unsubscribe link.
Object to processing. If you don’t want your visit counted, a standard tracker-blocker is enough; we won’t try to defeat it.

Depending on where you live, you may have additional rights under the GDPR, UK GDPR, or the California Consumer Privacy Act (CCPA), including the right to data portability and the right to lodge a complaint with your local supervisory authority. To exercise any of these rights, write to privacy@flush.io.

International transfers

Our providers (Loops, Umami Cloud, Cloudflare) may process data in the United States or other countries. Where required, we rely on standard contractual clauses and the providers’ own compliance certifications.

Children

Flush.io is not intended for anyone under 16. We do not knowingly collect email addresses from minors. If you believe a child has submitted an address, email us and we’ll remove it.

Changes to this policy

If we change what we collect or how we use it, we’ll update this page and change the “last updated” date at the top. Material changes are sent by email to anyone on the waitlist.