UnmaskJoin the waitlist

Draft for review

Privacy Policy

This page is a working draft for the Unmask landing page and waitlist. It must be reviewed and completed before publication.

Who is responsible

Unmask is an independent project operated by Maksim Sidiakin, an individual, not a registered company. Maksim Sidiakin is responsible for this website and its handling of personal information. For privacy requests, contact info@unmask.social.

What this page covers

When you join the Unmask waitlist, your email address is submitted to EmailOctopus, which processes the signup through its hosted form service so we can send an early-access invitation and rare important updates about Unmask. You can unsubscribe at any time using the link in an email.

Waitlist retention and deletion requests

We use your waitlist email only for an early-access invitation and rare important updates about Unmask. We retain active waitlist contacts while the waitlist operates and remove contacts that are no longer needed when it closes. Unsubscribing stops future marketing emails; it is not the same as deletion of all contact data.

To request deletion of your waitlist data, email info@unmask.social. We review and process requests manually, without undue delay and within any applicable legal deadlines. Acknowledgement of a request does not mean deletion has already been completed. Limited records may need to be retained where required by law or to respect an unsubscribe request.

Contact

For a request about your waitlist email or to ask for its removal, contact info@unmask.social.

Cookieless analytics (PostHog)

We use PostHog in cookieless mode to measure page visits, page departures, clicks on the header and bottom waitlist links, use of Clarity and Tone Tune, the selected tone category, and successful waitlist signups reported by EmailOctopus. Collection starts when you visit the page, unless you have disabled analytics here or your browser sends a Do Not Track or Global Privacy Control signal. We do not send your email address or message text to PostHog. Page addresses exclude query strings and fragments, and referring pages are reduced to their origin.

The PostHog SDK does not store analytics cookies or persistent analytics identifiers in browser local or session storage in this configuration. Technical data may include browser, operating system, device type, screen dimensions and page timing. PostHog receives network requests containing an IP address and uses a server-side hash based on technical request data to estimate visitors and sessions. According to PostHog, the hash changes daily and the IP address is removed before transformations; IP-based location enrichment is not available for cookieless events. This is technical data processing, not a promise that every visitor is anonymous or that consent is never required in every jurisdiction. See PostHog’s cookieless documentation.

Automatic click capture, session replay, heatmaps, surveys, error capture and person profiles are disabled. This project uses PostHog's US cloud region. You can stop future analytics or change your preference using . Stopping collection does not automatically delete previously transmitted events. Only your analytics preference, if you change it, is saved locally so we can remember that choice. Signup works regardless of this preference.

Analytics retention

We use PostHog’s free plan. PostHog currently publishes a one-year retention period for analytics events and metadata on this plan. PostHog states that data beyond the applicable retention period may be permanently deleted; this does not guarantee deletion of every event on an exact date. If our plan or retention arrangements change, we will update this policy. See PostHog pricing and retention information.

Embedded form and bot protection

EmailOctopus and Google reCAPTCHA load separately from PostHog cookieless analytics to provide the signup form and bot protection. They make external requests and may process technical information. Disabling PostHog analytics does not stop these services. Google’s Privacy Policy and Terms of Service apply to reCAPTCHA.

EmailOctopus processing and backups

EmailOctopus processes the waitlist contact list on our behalf. Its published terms describe cloud storage primarily in Ireland and additional processing by service providers in other locations, including the United States. Its Data Processing Schedule addresses sub-processors, international transfers and deletion. See EmailOctopus terms and Data Processing Schedule and its current sub-processor list.

We can delete contact records through EmailOctopus while our account is open. Deletion from the active contact list does not mean every backup copy disappears immediately: EmailOctopus states that backup copies may remain for up to 90 days after deletion. This is the provider's backup period, not a promise that we will wait 90 days to act on a request. See EmailOctopus privacy and retention information.

Email engagement tracking — setting to confirm

EmailOctopus supports tracking email opens and link clicks. We have not yet confirmed the settings for Unmask's outgoing emails. This must be resolved and this draft updated before sending a campaign; the site analytics settings do not control tracking inside emails.

Requests and correspondence

You can contact info@unmask.social to ask about the information we hold about you, request a correction or deletion, or raise a privacy concern. We will assess requests under the law that applies to them and may ask for information reasonably necessary to verify a request. Do not send a password, identity document or sensitive health information with an initial request. If you email us, we receive the information you choose to include so we can respond.

Links to other services

The site links to Threads and PayPal. Opening those links takes you to an external service with its own privacy terms. The landing page does not contain a payment form; any contribution is handled on PayPal.

For people in the EEA and the United Kingdom

This section supplements the information above where the EU General Data Protection Regulation or UK data protection law applies. Depending on the circumstances and applicable law, you may have rights to access or correct your personal data, request erasure or restriction, receive eligible data in a portable format, and object to certain processing, including direct marketing. Where processing relies on consent, you may withdraw that consent without affecting the lawfulness of earlier processing.

To make a request, contact info@unmask.social. You may also complain to the relevant data protection authority. These rights are subject to the conditions and exceptions in applicable law; a request does not mean deletion has already occurred.

Draft review still required: the legal basis for each processing purpose, applicable international transfer safeguards, request-handling deadlines and any required EEA or UK representative must be assessed and completed before publication. We have not appointed or named a representative in this draft. Merely including this section does not establish compliance or an exemption from representative requirements.

For people in Australia and the United States

Applicable privacy and marketing rules may provide additional protections depending on your location and whether their requirements apply to this project. Contact info@unmask.social with a privacy request or concern. Any additional disclosures required for the actual launch must be completed before this draft is published.

Information still needed before publication

Do not treat this draft as the finished privacy policy.