Privacy

Privacy Policy

1. Overview

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.

2. Data collection on this website

2.1 Waitlist sign-up

When you submit your email address through our sign-up form, the following data is stored:

• Email address (required)
• Date and time of sign-up
• A cryptographic hash of your IP address (the plain IP is never stored)
• Source/referral identifier
• User agent string (browser and device information)

Purpose: To notify you when Sen is launched. We do not send newsletters or marketing emails — only the single launch notification.

Legal basis: Art. 6 Abs. 1 lit. a GDPR (your consent, given by submitting the form).

Storage duration: Your email is retained until the launch notification is sent. You may request deletion at any time.

2.2 Server log files

The website provider (not us) automatically collects and stores information in server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address (in anonymized form)

Purpose: These data are not combined with other data sources. The collection of these data is based on Art. 6 Abs. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website.

2.3 Rate limiting

To protect against abuse, we store a cryptographic hash of your IP address and a timestamp when you interact with our forms. This data is used solely to limit repeat submissions and is automatically deleted after a short period.

Legal basis: Art. 6 Abs. 1 lit. f GDPR (legitimate interest in protecting against spam and abuse).

3. Cookies

3.1 Cookie consent

When you first visit this website, a cookie consent banner is displayed at the bottom of the page. By clicking "OK", you acknowledge that technically necessary cookies may be stored on your device. Your consent is saved in your browser's local storage under the key sen_cookie_consent and persists until you clear your browser data.

How to withdraw consent: Open your browser's developer tools → Application → Local Storage, and delete the sen_cookie_consent entry for this site. You may also clear all site data via your browser settings. The consent banner will reappear on your next visit.

3.2 Technically necessary cookies

This website uses the following technically necessary cookies:

• Session cookie (PHPSESSID): Required for the functioning of the website (e.g., CSRF protection for the sign-up form). This cookie is deleted when you close your browser.

We do not use tracking cookies, marketing cookies, or any third-party analytics cookies.

Legal basis: Art. 6 Abs. 1 lit. f GDPR (legitimate interest in secure form handling).

4. Third-party services

4.1 Google Fonts (local hosting)

This website uses fonts that are loaded from Google Fonts (fonts.googleapis.com). When you visit the page, your browser loads the font files from Google's servers. Your IP address may be transmitted to Google in the process.

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Purpose: Consistent and high-quality typography.
• Legal basis: Art. 6 Abs. 1 lit. f GDPR (legitimate interest in an appealing visual presentation).

For details on Google's data processing, see: Google Privacy Policy.

5. Your rights

You have the following rights with respect to your personal data:

• Right to access (Art. 15 GDPR) — You may request information about the data we hold about you.
• Right to rectification (Art. 16 GDPR) — You may request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) — You may request deletion of your data ("right to be forgotten").
• Right to restriction of processing (Art. 18 GDPR) — You may request that we limit the processing of your data.
• Right to data portability (Art. 20 GDPR) — You may request to receive your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent (Art. 7 Abs. 3 GDPR) — You may withdraw any consent you have given at any time. The legality of the data processing carried out before the withdrawal remains unaffected.
• Right to lodge a complaint (Art. 77 GDPR) — You have the right to lodge a complaint with a supervisory authority (e.g., the competent supervisory authority in your state).

To exercise any of these rights, please contact us at: {{EMAIL}}

6. Data security

We use technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access. Our security measures are continuously improved in line with technological developments.

IP addresses are never stored in plain text — only as cryptographic hashes (HMAC-SHA256) using a server-side secret, making it computationally infeasible to recover the original IP.

7. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Please revisit this page regularly to stay informed.

Last updated: June 2025