What Airframe collects when you get early access, why, and how to have it removed.
The controller for the purposes of the GDPR is:
Lucas LenarcicAirframe is a project run by one person and is not a registered company, so there is no data protection officer. Email reaches the controller directly.
This site sets no cookies and stores nothing in your browser: no local storage, no session storage, no fingerprinting. That is why there is no cookie banner. There is nothing to consent to until you use the form.
Data is only taken when you fill in the early-access form and press the button. Your name is not asked for. Giving your email is voluntary; without it you cannot join the list.
| What | Why |
|---|---|
| Your email address | The only way you are contacted |
| The consent wording you agreed to | So the record shows what you actually agreed to |
| When you signed up | When the entry was made |
| A random confirmation code, and whether and when you clicked the confirm link | So only people who confirmed their address get anything beyond the confirmation mail (double opt-in) |
| The page address you submitted from | Which part of the site the signup came from |
| The site that linked you here, if any | To know which posts and articles bring people |
| Campaign tags in the link you followed, if any (utm_source, utm_medium, utm_campaign) | To know which announcement a signup came from |
| Your browser's time zone name, such as Europe/Vienna | To plan roughly which regions shipping and support are for |
| Your browser's language setting, such as de-AT | To decide whether the site needs other languages |
| Whether you are on a phone, tablet or desktop | To know which layout to prioritise |
The last three are read from your browser at the moment you press the button, and only then. Airframe does not store your IP address, a user agent string or a screen fingerprint.
The form on the contact page sends your name if you give one, your email address, your message and the page address to Google Apps Script, which forwards it as one email to AirframeWatch@gmail.com. It is not added to the early-access list and you get no mail from Airframe other than the answer. The basis is Article 6(1)(b) and (f) GDPR: answering a question you asked. The email is kept in the inbox as long as the conversation needs it, and is deleted when you ask.
After signing up you get one email with a confirm link. Only once you click it do you get the rest: a short monthly build note, the price before it is public, the order window before it opens to everyone, and news about the tester pool. The basis is your consent, Article 6(1)(a) GDPR and § 174 TKG 2021, given by ticking the box on the form and confirming the link. You can withdraw it at any time, and every mail says how. Withdrawing does not affect anything done before.
Entries are written to a Google Sheet through Google Apps Script, and the emails are sent through Google's mail service (Google Ireland Limited / Google LLC). Google receives your IP address with the form request and when the confirm page checks your link, as any web server does, and acts as a processor. Data may be transferred to the USA on the basis of the EU–US Data Privacy Framework and standard contractual clauses.
The site is hosted by Vercel Inc., San Francisco, USA. Loading a page, or the pictures in an Airframe email, sends your IP address and the request headers to Vercel, where they appear in short-lived access logs kept for security and operation (Article 6(1)(f) GDPR, the legitimate interest in running the site safely). Vercel is certified under the EU–US Data Privacy Framework. Nothing from those logs is joined to the list.
Fonts are served from this site's own server. Apart from the form, opening a page here contacts no third party.
Entries that are never confirmed are deleted after 30 days. Confirmed entries are kept until you ask for deletion or withdraw consent, or until the early-access list is closed and everyone on it has been contacted, whichever comes first.
To use any of these, write to AirframeWatch@gmail.com. A one-line email is enough.
You can also complain to a supervisory authority. In Austria that is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at. If you live elsewhere in the EU, the authority in your own country can take the complaint instead.
There are none, and there is no profiling.