Last updated: November 2026
Who we are
Nuppo is the controller of your personal data: [Company/legal name], [Address].
Contact: privacy@getnuppo.com
What we collect
Your email address, when you join the waitlist.
Optional answers you choose to give: who Nuppo is for (kid, pet or both) and what matters most to you.
How you found us: the referring source and campaign tags (utm) in the link you used.
Your language, and the date and time you gave consent.
Basic, cookieless analytics about how the site is used (pages viewed, rough device and browser type), via PostHog EU.
Analytics cookies, only if you accept them in the cookie banner.
Why we use it, and our legal basis
To send you launch updates about Nuppo. Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time by unsubscribing.
To understand, in aggregate, how people find and use the site. Legal basis: our legitimate interest in running and improving the site (Art. 6(1)(f)) for cookieless analytics, or your consent (Art. 6(1)(a)) where cookies are used.
We never sell your data, and we don’t use it for advertising or ad profiling.
Where your data is stored
We store waitlist data in the EU wherever our providers allow it. Our own waitlist database runs on Cloudflare D1, set to the EU jurisdiction. Some of the providers below may also process data outside the EU; the next section explains how that is protected.
Who processes it for us
Framer: website hosting and the waitlist form.
Cloudflare: receives form submissions and hosts our waitlist database (Cloudflare D1, EU jurisdiction).
Resend: sends our emails and keeps the mailing list.
PostHog (EU Cloud): website analytics.
These providers only process data on our instructions, under a data processing agreement. Some of them may process data outside the EU, for example in the United States. When that happens, the transfer is protected by the European Commission’s Standard Contractual Clauses (SCCs) or the EU–US Data Privacy Framework.
How long we keep it
We keep your waitlist data until 12 months after launch, or until you unsubscribe, whichever comes first. Then we delete it.
Your rights
Under the GDPR you can:
access the data we hold about you;
correct it;
ask us to delete it;
withdraw your consent at any time (this doesn’t affect anything we did before);
object to processing based on our legitimate interest;
receive your data in a portable format.
To use any of these rights, email privacy@getnuppo.com. We’ll reply within one month. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr).
Children
Nuppo is made for families, but the waitlist is for adults. We only collect the email address of the parent or adult who signs up, never data about the child. If you think a child has signed up, contact us and we’ll delete it.
Cookies
On your first visit, a small banner asks whether you accept analytics cookies.
If you accept, PostHog may store a cookie and a local storage entry to recognise return visits, so we can understand how people find Nuppo.
If you decline, or don’t choose, we only use cookieless analytics: nothing is stored on your device for analytics.
We remember your choice in your browser’s local storage (nuppo_consent), so we don’t ask again. We also keep your language and the link you arrived from there, so the waitlist form can include them. To change your choice, clear this site’s data in your browser and the banner will appear again. We use no advertising cookies.
Changes to this policy
If we change this policy, we’ll update the date at the top. For important changes, we’ll also let you know by email.
Contact
Questions? Email us at privacy@getnuppo.com.
