Privacy notice

Effective: 2026-08-01

Scope

This notice explains how personal data is handled when you visit anniverse.app, view the proposed offer, join the early-access waitlist, or contact us about your privacy rights. It does not cover a released mobile app, user account, paid subscription, or payment flow because those services are not available through this website today.

Controller and contact

Anniverse is operated by Povilas Sabaliauskas, based in Lithuania. No company-registration or VAT claim is made for this pre-launch website. We are the controller of the personal data described here. Email: povilas.sabaliauskas@gmail.com. Privacy requests: https://anniverse.app/privacy-request.

Data we collect

When you join the waitlist: your email address, optional first name, early-access consent, optional marketing choice, consent timestamps and notice version, language/locale, offer shown, and campaign parameters in the link you used.

When you visit: limited technical request information processed by our host, such as IP address, request time, browser/user-agent, and security logs. Our first-party endpoint records a random event identifier, event type (landing_view or price_exposed), time, offer, pricing placement, and campaign parameters. To prevent abuse, the endpoint converts the request IP into a rotating HMAC-pseudonymous key and keeps only a request counter with a maximum ten-minute expiry in Supabase; the raw IP is not sent to that counter store. The owned measurement ledger does not receive your email, first name, relationship information, raw IP address, or a browser-session identifier.

This website does not ask for your partner's details, relationship notes, important dates, gifts, health data, passwords, card details, or payment information.

Purposes and legal bases

• Early access and launch updates: to send the requested confirmation email and, after confirmation, the updates you selected. Legal basis: consent.
• Optional product news and relationship tips: only if you select the separate optional checkbox. Legal basis: separate consent.
• Security, abuse prevention, and minimal aggregate validation: to secure and validate the waitlist. Legal basis: our legitimate interests. We do not use this basis for non-essential marketing trackers or marketing email without consent.

Double opt-in and choices

Submitting the form requests a confirmation email; it does not make you a confirmed subscriber. You join only after using the confirmation link. The optional marketing choice is separate and unchecked by default. You may unsubscribe or withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.

Required and optional fields

Email and early-access consent are required to request and confirm waitlist updates. Without them we cannot add you to the list. First name and general marketing consent are optional. Joining is not required to browse the public page.

Processors and transfers

Vercel provides hosting, serverless request processing, and security. MailerLite manages subscriber records, confirmation emails, unsubscribe controls, and waitlist messages. Supabase provides the owner-controlled, pseudonymous measurement ledger. We do not sell waitlist data or disclose it for third-party advertising.

Where a provider processes personal data outside the European Economic Area, the applicable adequacy decision or approved contractual safeguards, such as Standard Contractual Clauses, must apply. You may request information about the applicable safeguard through the privacy-request page. Provider-specific entity, DPA, subprocessor, and transfer review remains part of the visible legal-review-pending boundary.

Retention

We retain unconfirmed and confirmed waitlist records for no longer than 365 days after submission, unless you withdraw sooner or a shorter period is required to complete a deletion request. We may retain the minimum suppression record needed to respect an unsubscribe and legal obligations. Pseudonymous or aggregate validation counts that no longer identify you may be kept longer. Provider deletion, suppression, and backup feasibility remains subject to legal and provider review.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, or portability, object to processing based on legitimate interests, and withdraw consent at any time through the privacy-request page. We may ask only for information reasonably needed to verify the request.

Complaints

You may complain to the supervisory authority where you live or work or where the alleged infringement occurred. In Lithuania, this is the State Data Protection Inspectorate (VDAI).

Automated decisions and changes

We do not use waitlist data for automated decisions that produce legal or similarly significant effects. If a released app or our practices materially change, we will publish an updated notice before the new processing begins and seek consent where required.