Privacy Policy

DRAFT, not final legal text. This page is a placeholder and must be reviewed by a qualified lawyer before launch.

This policy explains what Cobalt Audio (“we”) collects when you join the waitlist at cobaltaud.io, why, and what you can do about it. [Legal entity name and address to be added.]

What we collect

Your email address, when you join the waitlist.
Attribution tags: if you arrived from a link that carries them, the campaign tags in that link (utm_source, utm_medium, utm_campaign, utm_content, utm_term) and a referral tag (ref), plus the page you signed up on.
A consent record: the exact wording you agreed to under the signup button and the time you agreed.
Technical data: your IP address is used briefly to block abuse (rate limiting and the Cloudflare Turnstile check). We do not store it with your signup.

Why we collect it

To send you emails about our releases and early access, which you asked for.
To confirm your address (double opt-in) and keep a record of your consent.
To learn which ads and links bring people to the site, so we spend less on the ones that don’t work.
To keep bots and spam out of the list.

[Lawful basis for each purpose to be confirmed in legal review.]

Who processes it

Brevo stores our email list and sends our emails.
Cloudflare Turnstile checks that signups come from people, not bots.
Vercel hosts this website and processes requests to it, including server logs.
Meta (Meta Pixel), only if you click Accept on the cookie banner. It measures visits and signups from our ads. If you decline, nothing from Meta loads.

[Processor locations, international transfers and safeguards to be added.]

Cookies and similar storage

cobalt_consent (first-party cookie, 180 days) remembers your Accept or Decline choice.
Session storage keeps the attribution tags from your first page until you sign up or close the tab.
Cloudflare Turnstile may use storage needed to run its check.
Meta Pixel cookies, only after you accept.

How long we keep it

[Retention period to be decided, for example until you unsubscribe, plus a short period for records.]

Unsubscribing

Every email we send has an unsubscribe link. Click it and you’ll stop getting our emails straight away.

Deleting your data

To ask us to delete your data, or to see what we hold about you, email hello@cobaltaud.io from the address you signed up with. We will reply within [time period to be confirmed].

Your rights

[Rights under applicable law, such as UK GDPR and EU GDPR, and how to complain to a regulator.]

Changes

[How we will tell you about changes to this policy.] Last updated: [date].