Small campaign, minimal data.

This limited validation campaign is operated by the Ventlings project team. This notice applies to the campaign site and its founder reservation form.

What is collected

The reservation form collects your optional first name, email address, chosen kit quantity, acceptance of reservation terms, optional marketing choice, and basic technical records needed to secure and operate the site. If present, campaign parameters, a non-personal referral code, landing path, and referring host are stored with the reservation so we can understand which outreach brought people to Ventlings.

Why it is used

We use reservation data to measure unique founder interest, update your selection when the same email is submitted again, operate the campaign, prevent abuse, and contact you about reservation-critical information. Optional marketing is used only when separately selected.

Storage and service providers

Reservation events are stored in private Vercel Blob storage and the site is hosted by Vercel. Raw email addresses are not placed in public file paths or returned by the campaign counter. Vercel Web Analytics measures aggregate page and campaign activity without using the reservation form’s name or email as analytics properties. If email confirmation is enabled, Resend processes the submitted address to deliver a one-time confirmation link; the public link contains a random token rather than the address. Stripe will process card details only if the separately gated card-setup flow opens. These providers process information to deliver their services; we do not sell or share reservation data for cross-context advertising.

Retention

Reservation records are kept through the validation campaign and for up to 24 months afterward, unless you request deletion or a longer period is reasonably required for security, dispute, or legal obligations. Records converted into paid orders will follow the final order policy.

Your choices

You may decline marketing without affecting your reservation. Resubmitting the same email updates the quantity. This limited validation release does not yet provide a verified self-service deletion flow, so do not submit information you do not want retained.

Cookies, tracking, and signals

This version does not use advertising trackers or behavioral profiling. It uses privacy-minded first-party page measurement, campaign parameters, referral host data, and non-personal referral codes to understand site traffic and reservation conversion. Essential hosting and security logs may also be created. Names and email addresses are not sent as analytics event properties. Because no cross-site advertising tracking is used, browser Do Not Track and Global Privacy Control signals do not change site behavior.

Children

This campaign is not directed to children under 13, and we do not knowingly collect their personal information. A parent or guardian who believes a child submitted data may request removal once the verified contact channel is published.

Security and changes

We use access controls and private storage intended to limit unauthorized access, but no online system is risk-free. Material changes will be posted here with a new effective date before they apply.

Paid launch gate: The verified legal seller, privacy contact, request channel, and any jurisdiction-specific disclosures must be published before paid checkout opens.