Privacy

Last updated 7 October 2026.

This notice covers this website and its waitlist. Varlatch itself is software you run on your own servers: we never see your secrets.

Who is responsible

Robotsson BV, Rotterdamstraat 47 box 5, 1080 Sint-Jans-Molenbeek, Belgium (enterprise number 0757.734.504). For anything about your data, email hello@varlatch.com.

What we collect

Only what you give us when you join the waitlist:

• your email address;
• when you signed up and confirmed, and which version of this notice applied.

Nothing is stored before you confirm: until then, your signup travels only in the link we email you. If you never click it, nothing is kept, apart from the email provider’s sending log described below.

This site uses no cookies, no analytics, and no tracking, and our emails contain no tracking pixels or tracked links.

The web server and the proxy in front of it keep no access logs, so we do not record visitors’ IP addresses. To stop abuse, the waitlist service counts signups per IP address in memory for up to a day; it never writes them down. Its logs record events such as “confirmation sent” without your address.

Why, and on what basis

To email you when the hosted off-site backup opens. The legal basis is your consent (GDPR Article 6(1)(a)). You can withdraw it at any time with the unsubscribe link in every email, or by writing to us.

Who processes it for us

• Resend (Resend, Inc., United States) sends our emails and stores the waitlist. Resend stores this data in the United States. The transfer is covered by Resend’s data processing agreement, its standard contractual clauses, and its certification under the EU-U.S. Data Privacy Framework. Resend keeps its log of sent emails for 30 days.
• Hetzner Online (Germany) hosts this website and the waitlist service on our server in its Nuremberg data center.

We do not sell or share your data with anyone else.

How long we keep it

Until you unsubscribe or ask us to delete it, and no longer than 12 months after Varlatch’s public release. Then we delete the list.

Your rights

You can ask to see, correct, or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to the address above. If you think we handle your data wrongly, you can complain to the Belgian Data Protection Authority (dataprotectionauthority.be).

Changes

We update this page when what we collect or who processes it changes, and change the date at the top.