Short, because there isn’t much to say.

Who is responsible

Ouzel is an early-stage project run by Cameron Davis. For the purposes of data protection law, Cameron Davis is the data controller. You can reach the controller at cameron@ouzel.io.

What we collect, and why

Your email address

Only if you submit it through the waitlist form, will we use it to tell you when Ouzel hardware is ready to try and, occasionally, to ask what you want from it. The legal basis is your consent, which you give by submitting the form and can withdraw at any time.

The time you signed up

Recorded alongside your email so we can contact people in the order they joined.

Your IP address, briefly

Like any web server, ours sees the address your connection comes from. We use it for two things: to stop the waitlist from being abused, and in routine server logs, where it is stored with the last part removed so it no longer uniquely identifies you. Those logs are rotated automatically and kept for a short time.

A Reddit ad click identifier, only if you came from one of our ads

When you click one of our ads on Reddit, Reddit adds a click identifier to the link. If you then join the waitlist, our server tells Reddit that the click led to a signup, so we can see which ads work. We don’t send Reddit your email address, IP address or anything else about you, and the identifier is held only in the open page, not in a cookie. If you didn’t arrive from a Reddit ad, nothing is sent. The legal basis is our legitimate interest in knowing whether our advertising works.

There are no cookies, no analytics, no advertising pixels and no third-party scripts on this site. The Reddit signal above is sent from our server, not your browser.

Who else handles it

Two services act on our behalf to move and store waitlist emails. They process the data only on our instructions and do not use it for their own purposes.

• EmailJS delivers the form submission to our inbox.
• Google (Google Workspace) is where the resulting message is stored.

Reddit receives the ad click signal described above. Reddit is not acting on our behalf here: it uses that signal under its own privacy policy to measure ad performance.

All three are based outside the European Union and the United Kingdom. Transfers rely on the safeguards each provider offers, such as the EU-US Data Privacy Framework or Standard Contractual Clauses. We do not sell, rent or share your email with anyone else.

How long do we keep it

Until you ask us to delete it, or if the project is shut down, whichever comes first.

Your rights

You can ask to see what data we hold about you, correct it, have it deleted, withdraw your consent, or object to the Reddit ad signal. There is no form for this. Email cameron@ouzel.io from the address you signed up with and we will act on it within 30 days. Every email we send also includes a way to unsubscribe. To avoid the Reddit signal entirely, visit the site directly rather than through a Reddit ad, or remove rdt_cid from the link.

If you are in the EU or UK and believe we have handled your data unlawfully, you also have the right to complain to your national data protection authority.

What about the Ouzel device?

This policy covers the website and the waitlist only. The device does not exist yet as a product. It is being designed to send us reports about what each smart device is and which hostnames it tried to reach, with as little data that points back to you as possible, and with the option to switch reporting off. That design, and our other intentions for how the device treats your data, are set out plainly in the Trust section of the homepage. A full policy for the device will be published before any hardware ships.

Changes

If this policy changes in a way that affects you, we will update the date at the top and email the waitlist.