Privacy notice
1. Who we are
The controller is Stathix, North Macedonia.
For anything about your data, email privacy@stathix.com.
2. What we collect and why
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Email address | To confirm your signup, to email you when Beta access opens, and to send occasional product updates | Consent | Up to 12 months after you sign up. 30 days if you never confirm |
| Consent record: the version of the short notice next to the form, the version of this privacy notice, and the time you submitted | To record what you were shown and when | Consent | Same period as your signup |
| Salted hash of your IP address. We do not store the IP address itself | To limit abuse and repeated signups | Legitimate interests (preventing abuse) | 30 days |
| Cloudflare Turnstile result. We keep only pass or fail, not the signals Cloudflare uses for the check | To block bots on the signup form | Legitimate interests (preventing abuse) | Used at signup only |
Cloudflare Turnstile processes client-side signals, including IP address, TLS fingerprint, User-Agent, sitekey and origin. That processing is described in Cloudflare’s Turnstile Privacy Addendum. Cloudflare does not publish a fixed retention period for those signals.
We also store which form you used (the top or the bottom of the page), the two-letter country code Cloudflare reports when it sends one, and whether your signup is confirmed. We keep a hash of the confirmation link, not the link itself, until you confirm or the link expires. We do not store your browser’s user agent.
We do not sell your personal data. We do not use it to profile you, or for automated decisions that produce legal or similarly significant effects.
3. Confirming your signup
After you submit the form, we send one confirmation email from noreply@stathix.com through Resend. The link works with one click and expires after 48 hours. If you never confirm, we delete the signup after 30 days.
4. Emails we send
- The confirmation email.
- An email when Beta access opens.
- Occasional product update emails. These are not being sent yet.
There is no unsubscribe link. To stop these emails, or to ask us to delete your waitlist record, email privacy@stathix.com. We aim to do that within one month.
You can withdraw consent at any time. Withdrawing consent does not affect processing that already happened while consent was in place.
5. Who processes your data
| Processor | Role |
|---|---|
| Cloudflare | Hosts the site, stores the signup database (Cloudflare D1, in the EU), and runs the Turnstile bot check |
| Resend | Sends the emails. Mail goes out from the EU region selected for the sending domain. Account data and logs stay in the United States (see the next section) |
They process this data only to provide these services to us, under their data processing terms.
6. Transfers outside the EU/EEA
Resend sends from the EU region we select, and stores customer data in the United States, including message content, delivery logs and account records. Resend’s data processing addendum covers those transfers with the EU Standard Contractual Clauses. Resend also states that it participates in the EU–US Data Privacy Framework, including the UK Extension. The clauses apply on their own and do not depend on that certification. See Resend’s GDPR page.
Cloudflare may process data in the United States and in other countries in order to provide its services. Its customer data processing addendum says a transfer to the United States under the EU–US Data Privacy Framework is not a restricted transfer. Where a transfer is restricted, the EU Standard Contractual Clauses in that addendum apply, including if the Data Privacy Framework certification lapses. On 10 October 2026, Cloudflare, Inc.’s public listing showed the EU–US Data Privacy Framework as active and marked “re-certification under review”.
Stathix is in North Macedonia, outside the EU/EEA. If you are in the EU/EEA or the UK, Stathix handles your waitlist data there as the controller, as well as through the processors above.
7. Cookies, analytics and your theme
We do not use analytics. We do not set cookies.
The only thing stored in your browser is your light or dark theme choice (localStorage). It stays on your device and is never sent to us.
When the signup form is available, Turnstile processes the signals described above. We do not store them.
8. Your rights
Where the GDPR applies, and under North Macedonia’s Law on Personal Data Protection, you can ask us to:
- access the personal data we hold about you;
- rectify data that is inaccurate;
- erase your data;
- restrict how we process it;
- object to processing that is based on legitimate interests;
- receive a copy of your data in a structured, commonly used format (portability);
- withdraw consent at any time, without affecting processing that was lawful before you withdrew.
Email privacy@stathix.com. We aim to reply within one month. Before we disclose or delete data, we may ask you to reply from the email address on the waitlist, so we know the request is yours.
9. Complaints
If you think we have handled your data badly, email privacy@stathix.com first.
You can also complain to:
- the Personal Data Protection Agency of North Macedonia (Агенција за заштита на личните податоци, AZLP) — azlp.mk/en, info@privacy.mk; and
- your local supervisory authority in the EU/EEA or the UK, if those laws apply to you.
10. Age
This waitlist is for a trading product. It is only for people aged 18 or over. Do not sign up if you are under 18. If we learn that a signup belongs to someone under 18, we will delete it.
11. Security
We use reasonable measures to protect the waitlist data we store. No method of storage or transmission is completely secure.
12. Changes to this notice
If we change this notice in a material way, we update the version and the effective date at the top. If a change affects how we use waitlist emails, we email confirmed addresses when we can. Where the law requires fresh consent, we ask for it.
13. Laws that apply
We intend this waitlist to comply with the GDPR, where it applies because the page is aimed at people in the EU/EEA, and with North Macedonia’s Law on Personal Data Protection (LPDP, 2020).