Privacy Policy
This privacy policy explains how Unne handles personal data collected through the waitlist at join.unne.io. It applies only to this waitlist page and its signup form. The Unne app at app.unne.io has its own separate privacy policy.
1. Who we are
Unne is currently operated by the Unne project and its founders, based in Finland. We are responsible for the processing of personal data described in this policy.
Contact: hi@unne.io
2. What data we collect
When you join the waitlist, we collect only what is needed to understand where Unne should go next and to notify you when Unne is available in your city.
| Data | Purpose | Required? |
|---|---|---|
| Email address | To send you a launch notification and waitlist updates | Required |
| Name | To address you personally in our emails | Optional |
| Country | To understand country-level demand and prioritise future availability | Required |
| City | To prioritise launch order by demand and to tailor city-specific updates | Required |
| Role (artist or venue) | To send you the most relevant updates for your role | Required |
| Language preference (EN) | To record the language used on the site | Automatic |
| Signup timestamp | To manage retention periods (see Section 7) | Automatic |
| Consent record (terms and privacy version at signup) | To demonstrate which version of these documents you agreed to | Automatic |
We do not collect IP addresses or any other data beyond what is listed above.
3. Why we process your data (legal basis)
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email, name, country, city, role, language | Sending you availability notifications and pre-launch updates | Consent (Art. 6(1)(a)) |
| Consent record (terms and privacy version at signup) | Demonstrating consent | Legitimate interest (Art. 6(1)(f)) |
| Analytics data | Understanding how visitors use the waitlist page | Consent (Art. 6(1)(a)) via cookie banner |
| Technical/server logs | Security, fraud prevention, service delivery | Legitimate interest (Art. 6(1)(f)) |
4. Cookies
Essential cookies — this waitlist does not use any essential cookies. Your cookie consent choice is stored in your browser's localStorage, which is first-party storage scoped to join.unne.io only and is not transmitted to any server.
Analytics cookies — with your explicit opt-in consent via our cookie banner, we use Google Analytics 4, which sets the following cookies:
| Cookie | Purpose | Expiry |
|---|---|---|
_ga | Distinguishes users across sessions | 2 years |
_ga_<ID> | Persists session state | 2 years |
These cookies are only set if you click "Accept All" or enable the analytics toggle in the cookie banner. You can change your preference at any time by clicking "Cookie Settings" in the footer.
When analytics cookies are denied, no Google Analytics script is loaded and no analytics data is collected.
5. How we send emails to you
We use Resend to deliver waitlist emails (the launch notification and any updates we send before launch). Resend processes your name and email address solely for the purpose of delivering these emails. EU customer data is processed at EU infrastructure. Resend Inc. is headquartered in the United States; Standard Contractual Clauses (SCCs) apply as an additional safeguard, and a Data Processing Agreement is in place.
Every email we send contains a one-click unsubscribe link. You can also email hi@unne.io at any time to be removed.
6. Data sharing and transfers
Supabase (database) — processes your waitlist signup. Data is stored and processed in the EU (Ireland — region eu-west-1). The data centres are operated by AWS within the EU. Supabase Inc. is US-headquartered; Standard Contractual Clauses (SCCs) apply as an additional safeguard for any administrative access from outside the EU.
Vercel (hosting) — serves the waitlist website. Vercel processes your IP address as part of normal web hosting but does not store this together with your waitlist signup. Requests from EU users are processed at EU edge locations. Vercel Inc. is US-headquartered; SCCs apply as an additional safeguard. Vercel is certified under the EU–U.S. Data Privacy Framework.
Resend (email delivery) — see Section 5.
Google Analytics (usage analytics, if you consent) — processes anonymized usage data. Google may transfer analytics data to the US for processing. This transfer is protected by Standard Contractual Clauses (SCCs), which are legal safeguards required under EU law. IP anonymization is enabled.
We do not sell your data. We do not share your data with advertisers. We do not use your data for profiling or automated decision-making.
7. Data retention
We keep your waitlist data for a maximum of 6 months from the date you sign up, or until you ask us to delete it — whichever comes first.
If Unne becomes available in your city before then, we will email you about availability and delete your data 60 days afterward. If Unne has not become available in your city within 6 months of your signup, we will either contact you to renew your consent or delete your data automatically.
| Data | Retention period |
|---|---|
| Waitlist signup data (email, name, country, city, role, language, consent record) | Maximum 6 months from signup, or until you unsubscribe / request deletion |
| Post-availability retention | If Unne becomes available in your city before the 6-month cap, your data is deleted 60 days after availability notification |
| Analytics data (Google) | 14 months (Google Analytics default) |
| Server logs | 30 days |
When your data is deleted, all associated records are permanently removed within 30 days of the deletion event.
8. Your rights under GDPR
Under the General Data Protection Regulation, you have the right to:
- Access your personal data — request a copy of what we hold about you
- Rectify inaccurate data
- Erase your data (be removed from the waitlist)
- Restrict processing — ask us to limit how we use your data
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time — using the unsubscribe link in any email or by emailing us
- Object to processing based on legitimate interest
To exercise any of these rights, contact us at hi@unne.io. We will respond within 30 days.
9. Right to lodge a complaint
You can lodge a complaint with a data protection authority. Because Unne is established in Finland, our lead supervisory authority is the Office of the Data Protection Ombudsman (Finland): tietosuoja.fi.
You may also have the right to lodge a complaint with the data protection authority in your country of residence.
10. Data security
We protect your data using industry-standard measures including encrypted connections (HTTPS/TLS), Row Level Security policies in our database ensuring only authorized server-side code can read or modify rows, and access controls limiting who can access production systems.
11. Children
The Unne waitlist is not intended for users under the age of 18. We do not knowingly collect data from minors. If you are under 18, please do not sign up.
12. Changes to this policy
We may update this policy to reflect changes in our practices or legal requirements. If we update this policy, we will change the "Last updated" date at the top of this page. For material changes, we will email everyone on the waitlist before the change takes effect.
13. Contact
For any privacy-related questions: hi@unne.io