Privacy Policy
Vroe Labs collects as little as possible. This page describes exactly what that means, in plain language.
Effective 11 October 2026
The short version
If you only read the list below, you have the important part. We store your email address only if you type it into our form and tick the consent box. We set no cookies of our own, we do not track you across other websites, and we never sell or share your address.
- No account, no login, no profile.
- No advertising, no cross-site tracking, no data sold or shared.
- One form, one field, and only if you choose to use it.
- Ask us to delete your details and we will, without asking why.
What we collect when you join the list
The updates form is the only place this website collects anything about you. When you submit it, we store four things:
- Your email address, so we can tell you when there is something worth knowing.
- The date and time you subscribed, so we have a record of when consent was given.
- The two-letter country code your request came from, provided by our hosting platform. We do not store your IP address alongside it.
- A note that you ticked the consent box.
That is the complete list for your signup. We do not ask for your name, and we do not attempt to work out who you are or where you work.
To stop the form being abused, we also count submissions from each IP address. That counter is stored in Cloudflare Workers KV under a key that contains your IP address, is not linked to your email address, and deletes itself after 10 minutes.
How your address is stored
Records are held in Cloudflare Workers KV. Each entry is filed under a one-way cryptographic hash of your address rather than the address itself, so the stored list cannot be browsed by guessing email addresses.
We keep a subscription record for up to 730 days from the date you subscribe, or until you ask us to remove it, whichever comes first.
We also keep backup copies of the list, so we can restore it if something goes wrong. Backups are made by hand, not on a schedule, and are kept on the founder's own computer. Each time a new backup is made, copies older than 30 days are deleted, so an older copy can remain until the next backup is made. If you ask us to remove your details, we delete them from the live list when we action your request, which we do within 30 days, and they drop out of the backups as those older copies are deleted.
What we deliberately do not do
- We do not write your email address into any log file or error report.
- We do not set advertising, analytics or preference cookies.
- We do not use session recording, heatmaps or fingerprinting.
- We do not send your details to any mailing-list provider, CRM or advertising network.
Bot protection
The form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than an automated script. Turnstile processes your IP address and basic browser signals to make that decision. It is an alternative to a traditional CAPTCHA that does not ask you to label photographs. Cloudflare describes how it handles that data in its own privacy policy, and we do not control it.
Analytics
This site does not use analytics. No analytics script loads, and we do not count or profile visitors. If that changes, this section will say so, and any analytics we add will be cookieless.
Hosting and server logs
This site is hosted on Cloudflare. As with any web host, Cloudflare processes technical request data — IP address, user agent, the page requested — in order to serve pages, block attacks and keep the site online. That processing is governed by Cloudflare's own privacy policy. Our application logs record whether a submission succeeded or failed, never the address involved.
If your browser blocks something on a page because of our security policy (the Content Security Policy), it may send us a report. We log only the rule involved, the address that was blocked and the page it happened on, so we can fix the site, and we keep nothing else from the report. These logs are held in Cloudflare Workers Logs.
Who else sees your data
No one. We do not sell, rent, share or trade your email address. The only third party involved is Cloudflare, which hosts the site and stores the data on our behalf as a processor. If that ever changes, we will update this page before it does — not afterwards.
Your choices
You can ask us at any time to tell you what we hold about you, to correct it, or to delete it. Email us and we will action it. There is no form to fill in and we will not ask you to justify the request.
Children
This site is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has subscribed, email us and we will remove the record.
Changes to this policy
If we change what we collect or how we use it, we will update this page and change the effective date at the top. Material changes to how we treat addresses already on the list will be noted on this page.
Contact
Questions, corrections, deletion requests and complaints all go to the same address, and a person reads it: Dev Patel, founder of Vroe Labs.
See also our terms of use.
Vroe Labs is not yet a registered company. Its products are being built and are not yet in testing. Full legal details will be published before launch.