SWAIPEN JOIN WAITLIST

LEGAL

PRIVACY
POLICY

LAST UPDATED 5 SEPTEMBER 2026 · VERSION 2.0

How the Swaipen prelaunch waitlist uses your email address, and how you stay in control.

Who is responsible

Jacob Beskow operates this website and the Swaipen waitlist as part of Swaipen UF, a student venture in Sweden’s Ung Företagsamhet programme. Jacob Beskow is the controller of the personal data described here.

This notice covers swaipen.com and this prelaunch waitlist. It does not cover a released Swaipen app. Questions and data requests: privacy@swaipen.com.

What we collect

We ask only for your email address. We do not ask for your name, date of birth, payment details or film preferences.

DataPurposeHow it is handled
Email addressConfirm your request and send the messages you choose to receive.Stored in our waitlist database. Sent to Resend when delivering email.
Subscription recordRecord your request, confirmation and withdrawal of consent.Status, timestamps, consent wording version and confirmation-link information.
Delivery informationDeliver confirmation messages reliably and avoid duplicate sends.Send attempts and delivery outcomes. Resend also processes delivery, bounce and complaint information.
Connection informationServe the site and limit automated signup attempts.Hosting providers receive network information. Our form stores a short-lived keyed rate-limit identifier, rather than the raw IP address.

We do not send signup notifications containing your address, country or referring page to a separate team inbox. We do not create advertising profiles.

Why we use it

Consent: after you confirm your email, we use it for a Swaipen launch invitation and occasional development updates. You can withdraw at any time using the unsubscribe link. Withdrawal does not change the lawfulness of earlier use.

Legitimate interests: we process the limited information needed to answer your signup request, deliver the confirmation, prevent abuse, remember opt-outs and troubleshoot delivery. We balance these purposes against your privacy and minimise the information used.

You do not have to provide an address, but we cannot invite you by email without one. We do not make decisions producing legal or similarly significant effects through automated processing.

Service providers and transfers

ProviderRoleLocation information
OpenAI Sites / CloudflareWebsite hosting, form processing and the D1 waitlist database.Hosting infrastructure may process data outside the EEA. We do not promise exclusively Swedish or EU storage.
ResendDelivery of email, including delivery and abuse-prevention records.Customer data is processed and stored in the United States. A European sending region does not change the storage location.
Google FontsYour browser requests the fonts directly from Google, disclosing network information such as its IP address.Google is US-established. Its handling of these requests is described in its own privacy information.

Resend describes its international-transfer safeguards, including Standard Contractual Clauses and Data Privacy Framework participation, in its GDPR information. Contact us for information about the safeguards applicable to the services used for your data.

We do not sell your address or share it for another organisation’s marketing. Service providers still process data to operate the site and deliver email. We may also disclose data where required by law.

How long we keep it

  • Unconfirmed requests: confirmation links expire after 24 hours. Pending records older than seven days are removed when the form next performs cleanup.
  • Confirmed subscriptions: kept while we operate this prelaunch waitlist and you remain subscribed. We review the list at least annually and when the UF project ends. If this purpose ends, we delete the list or ask before using it for a different purpose.
  • Opt-outs: we keep the address and a minimal subscription/withdrawal record to avoid adding you back accidentally. Unsubscribing stops updates; it does not automatically erase this suppression record. You can ask for deletion.
  • Rate-limit identifiers: they stop being used after their short window, expire after two minutes and are removed during the next form cleanup. Hosting logs and email-provider delivery records have separate provider retention periods.

A change from the UF project to another operator does not automatically authorise new use of your address. We will explain any proposed change and obtain consent where required.

Your choices and rights

You can request access, correction, deletion, restriction or portability of your personal data where applicable, object to processing based on legitimate interests, and withdraw consent.

Email privacy@swaipen.com. We respond within the GDPR time limit, normally one month. We may need proportionate verification that the request relates to your address.

You can complain to Sweden’s Integritetsskyddsmyndigheten (IMY) or another competent supervisory authority. You do not have to contact us first.

Cookies and email tracking

The website does not use analytics cookies, advertising pixels, browser storage or fingerprinting. The font requests described above are still made to Google.

We do not use email open pixels or tracked links. Our confirmation service checks that both settings are disabled on the sending domain before it sends. Basic delivery, bounce and complaint information is still processed to deliver messages safely.

What joining means

Submitting the form requests a confirmation email. You join the list only after opening the link and pressing “Confirm and join.” Simply opening the email link does not subscribe you.

After confirmation, you can receive a launch invitation and occasional Swaipen development updates. Every update must include a way to unsubscribe. Open the unsubscribe link and press “Unsubscribe” to record your opt-out; requests by reply or to our contact address are handled by the team.

Submitting an address again does not immediately reverse an opt-out. A new confirmation from the owner of the address is required.

Security

Provider credentials stay on the server. We use signed confirmation/unsubscribe links, bounded requests and rate limiting. No system can guarantee absolute security. We handle personal-data breaches and any required notifications under the applicable law.

Age and scope

This prelaunch waitlist is intended for people aged 16 or over. This is our audience choice, not a statement that Swedish law sets a universal digital-consent age of sixteen. Contact us if an address from a younger child has been submitted.

Changes and contact

We update the date and version when this notice changes. We will explain material changes affecting existing subscribers and ask for new consent where required.

Controller: Jacob Beskow, Swaipen UF, Sweden.
Privacy: privacy@swaipen.com
General enquiries: support@swaipen.com