Privacy Policy
Last updated August 23, 2026.
This policy explains what Parallel collects on this waitlist page, why, and what you can do about it. It is written to the EU's General Data Protection Regulation (GDPR) — the strictest standard among the places visitors come from — and applies the same way to every visitor, regardless of where you are. Parallel itself, the product, does not exist yet; this page and its waitlist are all that's live today.
Who is responsible for your data
This page and its waitlist are operated by an individual based in Hungary, ahead of any formal company registration. Reach the operator at hello@parallel.app for any request about your data — including deletion, which is also available any time via the link in your confirmation email.
Hungary's National Authority for Data Protection and Freedom of Information (NAIH) is the supervisory authority for this processing.
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Email address | To add you to the early access list and send the confirmation link. | Consent (Art. 6(1)(a)) — given when you submit the form. |
| Your answer to "what's the hardest part of messaging your co-parent" (optional) | To understand what to actually build, if you choose to tell us. | Consent — this field is optional and blank by default. |
| Country (2-letter code only, e.g. "HU") | To see which markets are interested, in aggregate. Never used to block or restrict access. | Consent, bundled with the signup. |
| A salted, one-way hash of your IP address (never the IP itself) | To rate-limit abusive submissions from the same origin. | Legitimate interest (Art. 6(1)(f)) in keeping the signup form from being abused. |
| Confirmation status and timestamp | To prove you actually own the email address you submitted. | Consent. |
| Referring page / UTM source, if present in the link you arrived from | To see which channels bring signups, in aggregate. | Legitimate interest in understanding how people find this page. |
Cookies and analytics
This page uses Google Analytics to understand traffic — no Meta Pixel, no session recording, no heatmaps. Google Analytics sets cookies, so it only loads if you accept the banner shown on your first visit; declining it (or ignoring it) means no analytics cookie is set for you and nothing is sent to Google. Legal basis: your consent (Art. 6(1)(a)), given through the banner. You can withdraw consent at any time by clearing this site's data in your browser, which brings the banner back.
How long we keep it
Your data is kept until you ask us to delete it (see below), or until Parallel launches — or we decide not to launch it, in which case the whole waitlist is deleted.
Removing your data
Every confirmation email includes a one-click link that permanently deletes your email address and anything else you submitted. If you can't find it, email hello@parallel.app and we'll remove it by hand.
Who else processes this data
We use a small number of service providers (processors) to run this page. None of them may use your data for their own purposes.
- Supabase — database that stores your signup, hosted on AWS infrastructure. Where the underlying servers sit outside the EU/EEA, that transfer is covered by Supabase's Data Processing Addendum and its Standard Contractual Clauses, its standard safeguard for cross-border processing.
- Resend — sends the confirmation email. US-based; stores data on AWS infrastructure. Operating from the EU means this is an international transfer of your email address, covered by Resend's Data Processing Addendum and its Standard Contractual Clauses, its standard safeguard for transfers of this kind.
- Netlify — hosts this website. US-based; provides a Data Processing Addendum and Standard Contractual Clauses for transfers outside the EU/EEA.
- Google (Google Analytics) — only if you accept the cookie banner. US-based; provides a Data Processing Addendum and Standard Contractual Clauses for transfers outside the EU/EEA. See Google's privacy policy for how they handle this data on their end.
- Cloudflare — runs the Turnstile challenge that checks you're not a bot when you submit the form. Provides a Data Processing Addendum and Standard Contractual Clauses for transfers outside the EU/EEA.
Security
The database is locked down so only server-side code can read the waitlist table — not even this website's own public key can. Your IP address is never stored, only a salted hash of it.
Changes to this policy
If this changes materially, the "last updated" date at the top will change, and anyone already on the confirmed waitlist will be told by email.