Privacy Policy
Vroe Labs collects as little as possible. This page describes exactly what that means, in plain language.
Effective 1 September 2026
The short version
If you only read the list below, you have the important part. We store your email address only if you type it into our form and tick the consent box. We set no cookies of our own, we do not track you across other websites, and we never sell or share your address.
- No account, no login, no profile.
- No advertising, no cross-site tracking, no data sold or shared.
- One form, one field, and only if you choose to use it.
- Ask us to delete your details and we will, without asking why.
What we collect when you join the list
The early-access form is the only place this website collects anything about you. When you submit it, we store four things:
- Your email address, so we can tell you when there is something worth knowing.
- The date and time you subscribed, so we have a record of when consent was given.
- The two-letter country code your request came from, provided by our hosting platform. We do not store your IP address alongside it.
- A note that you ticked the consent box.
That is the complete list. We do not ask for your name, and we do not attempt to work out who you are or where you work.
How your address is stored
Records are held in Cloudflare Workers KV. Each entry is filed under a one-way cryptographic hash of your address rather than the address itself, so the stored list cannot be browsed by guessing email addresses.
We keep a subscription record for up to 730 days from the date you subscribe, or until you ask us to remove it, whichever comes first.
What we deliberately do not do
- We do not write your email address into any log file or error report.
- We do not set advertising, analytics or preference cookies.
- We do not use session recording, heatmaps or fingerprinting.
- We do not send your details to any mailing-list provider, CRM or advertising network.
Bot protection
The form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than an automated script. Turnstile processes your IP address and basic browser signals to make that decision. It is a privacy-preserving alternative to a traditional CAPTCHA: it does not track you across websites and does not ask you to label photographs.
Analytics
We use Cloudflare Web Analytics to see roughly how many people visit and which pages they read. It is cookieless and privacy-first: it does not use client-side state, does not fingerprint visitors, and does not follow you to other sites. The data we see is aggregate — page views, referrers, countries and broad device categories — and cannot be traced back to an individual.
Hosting and server logs
This site is hosted on Cloudflare. As with any web host, Cloudflare processes technical request data — IP address, user agent, the page requested — in order to serve pages, block attacks and keep the site online. That processing is governed by Cloudflare's own privacy policy. Our application logs record whether a submission succeeded or failed, never the address involved.
Who else sees your data
No one. We do not sell, rent, share or trade your email address. The only third party involved is Cloudflare, which hosts the site and stores the data on our behalf as a processor. If that ever changes, we will update this page before it does — not afterwards.
Your choices
You can ask us at any time to tell you what we hold about you, to correct it, or to delete it. Email us and we will action it. There is no form to fill in and we will not ask you to justify the request.
Children
This site is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has subscribed, email us and we will remove the record.
Changes to this policy
If we change what we collect or how we use it, we will update this page and change the effective date at the top. Material changes to how we treat addresses already on the list will be announced to that list.
Contact
Questions, corrections and deletion requests all go to the same address, and a person reads it.
See also our terms of use.