Privacy · Updated 12 September 2026
What we know about you
A small signup list, used to invite you to early testing. You can leave at any time.
Who is responsible
Stadlo is run by Ivo Culic in Stockholm, Sweden, who is responsible for your personal data (the data controller). For privacy questions or requests, email [email protected].
What you share and why
When you join early testing, we store your email address, your Stockholm-status choice and the date you signed up. We use these to invite and coordinate early testers. These details are required to join the list; browsing the website does not require a signup.
Our basis for using signup details is your consent, given when you choose to join. We do not use the list for unrelated marketing, sell it, or make automated decisions with legal or similarly significant effects about you.
How long we keep it
We keep signup details for four months from signup, or remove them sooner if you withdraw or early testing ends. A daily cleanup removes records once the four-month period has passed. Signing up again with the same email while it is on the list does not restart that period.
Deleted records may remain temporarily in Cloudflare’s recovery backups until those backups expire. If a backup is restored, deletion requests and the retention limit must be reapplied before the list is used.
Hosting and security checks
Cloudflare hosts this website and stores the signup list in D1. We use Cloudflare Turnstile to prevent automated spam. It processes technical information such as your IP address, browser and device signals to check whether a submission is legitimate. Our basis for protecting the website is our legitimate interest in preventing abuse.
We do not store IP addresses or browser profiles in the signup table. Cloudflare separately processes technical request and security data to operate its services. See Cloudflare’s privacy policy, including its Turnstile addendum for its handling and retention of that information.
Cloudflare uses a global network and may process information outside the EU/EEA. Its data processing terms describe safeguards for international transfers, including standard contractual clauses where applicable. Contact us for more information about the safeguards used for your data.
Cookies, location and email
We do not add advertising trackers, marketing cookies or analytics scripts. Turnstile is used for security, not advertising. This website does not request your device’s location. Fonts and website images are hosted with the site.
New signups receive a one-time acknowledgment through Zoho ZeptoMail. We send ZeptoMail your email address and the message contents through its EU API endpoint. Email open and click tracking are disabled. We store a delivery-attempt status, reference and update time alongside your signup to avoid duplicate acknowledgments and investigate failures. These records are deleted with your signup. ZeptoMail also retains delivery records underZoho’s privacy policy. If you contact us by email, we also receive the contents of your message and use them to answer your request. Keep sensitive information out of your message unless it is needed for your request.
Our contact mailbox is hosted by Zoho Mail. Zoho processes correspondence on our behalf; see Zoho’s privacy policy. We keep correspondence only as long as needed to answer your request or meet a legal obligation. Privacy-rights requests are handled to meet our legal obligations; other correspondence is handled in our legitimate interest in responding to you. The four-month automatic cleanup applies to the signup list, not the mailbox.
Your choices and rights
You can withdraw consent at any time by replying to a testing email or writing to [email protected]. We will stop using your signup details and remove them from the active list. Withdrawal does not affect processing that took place before you withdrew.
You can ask to access, correct or delete your personal data, receive a portable copy where applicable, restrict processing, or object to processing based on legitimate interests. We may need to verify that a request comes from you. We normally respond within one month.
You can also complain to Integritetsskyddsmyndigheten (IMY), Sweden’s data protection authority, or the supervisory authority where you live or work.