Privacy Policy

This website is operated by [INSERT LEGAL NAME], based at [INSERT BUSINESS ADDRESS], [INSERT COUNTRY]. You can reach us about anything in this policy at [INSERT PRIVACY CONTACT EMAIL].

SmashingVolleyball is currently in development. The website presents what the platform will offer and lets you join a waitlist. No courses, analyses or products are sold yet.

Right now the only personal data we collect is what you enter into the waitlist form:

• Your email address.
• The date and time your registration was created.
• A first name, only if you choose to provide one (the current form does not ask for it).
• A simple source label indicating where you came from (for example "tiktok", "instagram" or "website"), taken from the link you used or from your browser referrer.
• Whether you ticked the optional consent for additional updates.

We do not collect payment data, we do not ask you to create an account, and we do not run advertising or tracking pixels. Standard server logs of the hosting infrastructure (for example IP address and browser type) may be processed for security and operation of the site.

We use your waitlist information only to:

• Register you on the SmashingVolleyball waitlist and avoid duplicate entries.
• Notify you when SmashingVolleyball launches.
• Send you updates that directly relate to the launch of the service you signed up for.
• Understand roughly which channels people found us through, using the source label.

Joining the waitlist does not give us permission for unrelated marketing. If we later introduce a newsletter or promotional emails, we will only send them to people who gave separate, explicit consent for that purpose, and you can withdraw it at any time.

Our processing of your waitlist data is based on the consent you give when you tick the box and submit the form. You can withdraw that consent at any time by contacting us, and we will delete your entry.

If SmashingVolleyball is subject to the GDPR, we handle your data according to its core principles:

• Lawfulness, fairness and transparency — we only process data you knowingly submitted, for the purposes described here.
• Purpose limitation — waitlist data is used for the waitlist and launch communication only.
• Data minimisation — we ask for an email address and nothing more.
• Accuracy — you can ask us to correct your data at any time.
• Storage limitation — see the retention section below.
• Integrity and confidentiality — see the storage and security section below.

Needs legal review: The applicable jurisdiction ([INSERT COUNTRY]) and the exact legal basis (consent vs. legitimate interest) must be confirmed with a qualified adviser before launch. This draft assumes consent.

Waitlist entries are stored in a managed PostgreSQL database provided by Supabase, which acts as our infrastructure provider and processes the data on our behalf. Access is restricted at database level: the public website can submit a new entry, but it cannot read, search, change or delete any entry. Only authenticated administrators can view the subscriber list, through a private, password-protected dashboard.

The public website never displays subscriber data, and database credentials and API secrets are never exposed in the website's code.

We keep waitlist entries for: [INSERT DATA RETENTION PERIOD/POLICY].

Personal information should not be kept indefinitely without a reason. Once the purpose you signed up for has been fulfilled — or if you ask us to remove you — your entry is deleted.

These are the external services that actually process data for this website:

• Supabase — hosts the database that stores waitlist entries and handles administrator login.
• Our hosting provider — serves the website and keeps standard technical server logs.

We do not currently use analytics tools, advertising networks, tracking pixels or an email marketing provider. If that changes, this policy will be updated before the service is switched on.

The public website does not use advertising, analytics or tracking cookies. It stores a single value in your browser's session storage to remember which link brought you here (the source label), which is cleared when you close the tab. The private admin area stores a login session in the administrator's browser, which is strictly necessary for the login to work.

Because no non-essential tracking is used, no cookie consent banner is required at this time. If we ever add analytics or marketing technologies, we will add a proper consent mechanism first.

Depending on where you live, you may have the following rights regarding your personal data:

• Access — ask what data we hold about you.
• Correction — have inaccurate data corrected.
• Deletion — have your data erased.
• Restriction — ask us to limit how we use your data.
• Objection — object to certain processing.
• Data portability — receive your data in a common machine-readable format.
• Withdrawal of consent — withdraw consent at any time, without affecting processing already carried out.
• Complaint — lodge a complaint with the supervisory authority responsible in your country.

Needs legal review: The competent supervisory authority for [INSERT COUNTRY] must be named here once the jurisdiction is confirmed.

For anything related to your personal data — including deletion requests — write to [INSERT PRIVACY CONTACT EMAIL]. We will respond within the period required by applicable law.

See also our Legal Notice and Terms & Conditions.