Skip to content

Privacy

What we keep

The short version: the waitlist stores your email address at Buttondown so we can email you about Rodeo. There is no analytics, no advertising, no tracking, and nothing is sold or shared. Unsubscribe from any email, or write to privacy@rodeooh.rodeo and it is deleted.

What the waitlist collects

Three things, when you submit the form and only then:

  • Your email address. Stored at Buttondown. It is the whole point of the form.
  • Your IP address, passed to Buttondown with the signup as a spam signal. It is not stored by us.
  • Which page you signed up from — a short label like home or log-post. This is written to our own server log and sent nowhere. Your address is never written to that log.

The legal basis is your consent. Nothing is sent until you click the link in the confirmation email, and Buttondown records the date and time you did, which is what makes the consent demonstrable.

Who else handles it

Buttondown — United States

The email list itself. Buttondown holds your address and the record of your consent, sends the confirmation email and the newsletter, and handles unsubscribes. They act as a processor on our instructions, under a data processing agreement that uses Standard Contractual Clauses for transfers out of the UK and EU. Their policy: buttondown.com/legal/privacy.

Cloudflare — United States

Hosts this site and runs the small piece of code that handles the signup. Cloudflare sees what any web host sees — your IP address, your browser's user agent, and which page you asked for — and retains it briefly as operational logs. Cloudflare also provides Turnstile, the "verify you are human" check on the signup form, which exists to stop bots filling the list. Their policy: cloudflare.com/privacypolicy, and the processing terms: their customer DPA.

That is the complete list. No one else receives anything.

What this site does not do

  • No analytics. No page-view counter, no heatmaps, no session recording, no advertising or conversion pixels of any kind.
  • No cookies of our own. We set none. Cloudflare may set one as part of the Turnstile check on the signup form.
  • No fonts loaded from anyone else. All 28 font files are served from this domain. Loading Google Fonts from Google's own servers has been found to breach the GDPR in German case law, and avoiding it costs nothing.
  • One third-party script, on one form. Turnstile, on the signup form only. Nothing else on the site loads code from another origin.

Stored in your browser

The rodeo-sdk documentation saves a display preference under the key starlight-theme. It stays on your device, is never transmitted, and clearing your browser data removes it. Nothing else on the site stores anything locally.

How long it is kept

  • Your email address: until you unsubscribe or ask for it to be deleted. There is no other expiry — if the Kickstarter is years away, the list waits.
  • An address that never confirms: stays unactivated and is never emailed again.
  • Server logs: held by Cloudflare for a short operational window and not copied anywhere else.

Your rights

You can ask for a copy of what is held about you, have it corrected, have it deleted, have it sent to you in a portable form, or withdraw your consent — and withdrawing it is as easy as giving it.

The unsubscribe link in every email is the fastest route and needs no reply from anyone. For anything else, write to privacy@rodeooh.rodeo. Deletion is permanent and we do not keep a suppression copy unless you ask us to.

Changes

If this page changes in a way that affects what is collected or who sees it, the change is announced in the build log rather than quietly slipped in. Last updated 15 October 2026.