Privacy Policy

Boba keeps secrets for a living. Here is exactly what this website collects, why, and what your rights are. Short version: an email address if you join the waitlist, and anonymous visit counts. That's the whole racket.

1. Who is responsible

Controller: David Hristev, bul. Vasil Levski, Sofia, Bulgaria. Email: boba@talktoboba.com

2. Waitlist data

If you join the waitlist we store:

• your email address and which plan you were interested in,
• a salted, one-way hash derived from your IP address (spam and abuse prevention only — the original IP cannot be recovered from it),
• your browser's user-agent string and the referring page,
• a timestamp.

Legal basis: your consent (Art. 6(1)(a) GDPR) for the waitlist itself; our legitimate interest (Art. 6(1)(f) GDPR) for abuse prevention. We use the email only to tell you about the launch of Boba's Brain Trust. No resale, no ad networks, no "trusted partners."

Storage: Supabase (Postgres), hosted in the EU (AWS eu-central-1, Frankfurt).

Retention: until the launch communication is complete or you ask us to delete it, whichever comes first.

3. Analytics

We use a self-hosted instance of Umami, a privacy-friendly analytics tool. It sets no cookies, stores no personal identifiers, and does not track you across sites. We see aggregate counts (page views, referrers, country-level location) — not you.

4. Hosting & server logs

The site is served by Vercel. Like every web host, Vercel processes technical connection data (IP address, request time) to deliver the page and protect against abuse.

5. Your rights

Under the GDPR you can request access, rectification, erasure, restriction of processing, data portability, and object to processing. You can withdraw waitlist consent at any time — one email and you're out, no exit interview, Boba doesn't beg. You also have the right to lodge a complaint with a supervisory authority.

6. Contact

Privacy contact: boba@talktoboba.com