Privacy policy

Last updated: September 23, 2026. Plain-language summary: we collect as little as possible, never sell it, and you can leave anytime.

Who is responsible

Quentin Fankrache EI, the publisher listed in the legal notice, is the data controller. Contact: [email protected].

What we collect and why

• Waitlist: your e-mail address, the referral code you came with, the site that referred you, the campaign tag of the link you followed (utm_source) and your country (from the hosting network). Purpose: tell you when Marvelous UI launches, send launch offers and product news, and credit referrals. Legal basis: your consent when you submit the form (GDPR art. 6.1.a). Kept until you unsubscribe, or 24 months without interaction.
• Confirmation e-mail (double opt-in): when you join, Brevo sends you an e-mail with a confirmation link. You join our mailing list, get your place in line and count as a referral only once you click it. Until then, that confirmation is the only e-mail you get from us (sent again only if you join again).
• Bot check: the waitlist form uses Cloudflare Turnstile to tell people from bots. It runs when you use the form and processes technical data about your browser and connection, including your IP address, for that check only. Legal basis: our legitimate interest in keeping the waitlist free of spam and fake signups (GDPR art. 6.1.f).
• Customers: name, e-mail, billing country and order details, handled by our merchant of record Polar (polar.sh), which processes payments as an independent controller and issues your license key. Legal basis: contract and legal obligations (invoices are kept 10 years).
• Playground: your pages are stored only in your own browser (localStorage). A license key you enter is sent to our server, and from it to Polar, only to check it. Your browser is identified by a random id, which reaches Polar only as a hash.
• Security: our server uses your IP address, hashed, to limit abuse (rate limits). It is not stored with your e-mail address.
• Analytics: Cloudflare Web Analytics counts page views and measures page-load performance. It sets no cookie, stores nothing in your browser, does not track you across sites and does not collect query strings (such as ?ref=). Legal basis: our legitimate interest in knowing how the site is used (GDPR art. 6.1.f).

Who we share it with

Only the providers needed to run the service: Cloudflare (hosting, storage, bot check, analytics), Brevo (e-mail sending, EU) and Polar (merchant of record: payments, invoices and license keys). Transfers outside the EU rely on the European Commission's standard contractual clauses or adequacy decisions. We never sell or rent your data.

Your rights

You can access, correct, delete or export your data, withdraw consent and object at any time: e-mail us, or use the unsubscribe link in every e-mail. You can also complain to the CNIL (cnil.fr).