Privacy policy
Last updated 6 October 2026
This page covers the Ricochet website and its waitlist. Ricochet itself, the webhook gateway, isn’t open yet; it will have its own terms and data processing details before anyone can send it events.
What we collect
When you join the waitlist, we store:
- Your email address, and the times you joined, confirmed and, if you do, unsubscribed.
- Where you came from: the page you landed on, the campaign parameters in its link
(
utm_source,utm_medium,utm_campaign,utm_term,utm_content), any ad click ID an ad platform added to the link (gclid,fbclid,msclkid,ttclid,li_fat_id), and the site that sent you (its address without the query). - Your country, as Cloudflare detects it from your connection. Not your IP address.
- Your survey answers, if you answer the optional questions after joining.
- Referrals: the code in your share link, and whose link you joined through, if any.
When you just visit, we don’t run analytics or advertising trackers. Our web server and the waitlist service keep logs to run and protect the site: access logs with your IP address, browser and the pages requested, and, for the waitlist, error and security events, which can include an email address or IP address. Logs are kept for [LOG RETENTION].
Why
- To run the waitlist: confirm your address, email you when your invite is ready, and send occasional updates about Ricochet’s progress. Every email has a one-click unsubscribe link. This is based on your consent, given when you join, and you can withdraw it at any time by unsubscribing.
- To understand which channels work: where signups come from decides where we spend on ads. This is our legitimate interest, and we only look at it in aggregate.
- To keep the waitlist free of abuse: rate limits, bot checks and blocking disposable addresses use your IP address and the address you enter, briefly and without storing the IP. This is our legitimate interest too.
When you join or confirm, the operator gets an email with your address, the source of your signup, and the IP address, country and browser of that request, to spot fake signups early. We don’t sell your data or share it with advertisers.
Who else handles it
| Service | What for | Where |
|---|---|---|
| Cloudflare | Network, DNS and security for the site, and bot checks (Turnstile) on the form | Global |
| DigitalOcean | Hosting the site, the waitlist service and its database | United States |
| Resend | Sending the waitlist emails | United States |
Each processes data only to provide its service to us. If you’re in the EU or UK, this means your data is transferred to the United States, under these providers’ standard contractual clauses or equivalent safeguards.
How long
We keep your waitlist entry until Ricochet invites you, you ask us to delete it, or we close the waitlist. Unsubscribing stops all emails; we keep the entry, marked as unsubscribed, so we don’t email you again, unless you ask us to delete it. Deleted entries leave our daily database backups within 14 days.
Your rights
You can ask for a copy of your data, to correct it, or to delete it, and you can object to how we use it. Write to the contact address below from the email address you signed up with. We’ll answer within 30 days. If you’re in the EU or UK, you can also complain to your data protection authority.
Changes
If this policy changes in a way that matters, we’ll update the date above and tell people on the waitlist by email before the change applies.
Contact
Ricochet is run by [LEGAL NAME OF THE OPERATOR, COUNTRY]. For anything about this page, your data or the waitlist, write to [CONTACT EMAIL].