Privacy
Privacy
This page explains what Bed Sauce collects when you join the launch list, why, and who else touches it. Right now the site does one thing — it takes an email address so we can tell you once when pre-orders open. No payment is taken and no account is created.
Last updated: Not yet published
Draft — not legally reviewed
This page has not been reviewed by a lawyer and must not be relied on. It describes accurately what the site does with your information, but the legal terms around that are unfinished. Items marked below are open questions, not commitments.
Who we are
Bed Sauce is operated by [LEGAL ENTITY NAME], [PHYSICAL MAILING ADDRESS]. Questions about this page go to [PRIVACY CONTACT EMAIL].
- Needs counselConfirm the operating entity and the physical mailing address. CAN-SPAM requires a real address in every commercial email, so this is needed regardless.
What we collect when you join the list
Everything below is stored in a single database row created when you submit the form. This list is complete. Separately, the site counts visits with Vercel Web Analytics (see below), which sets no cookies and is not tied to your signup. There is no advertising pixel on this site.
- Your email address
- The only piece of information you type. Stored case-insensitively, so one address can hold only one place on the list.
- Which format you chose
- Bottle, packets, or both. Used to size the first production run.
- Which page you signed up from
- Whether you came from the bottle page or the packets page. Used to understand which format people respond to.
- Campaign tags in the link you followed
- If you arrived from an ad or a post, the utm_source, utm_medium, utm_campaign, utm_term and utm_content values in that link are stored alongside your signup.
- Your age confirmation
- That you ticked the box confirming you are 18 or older, and the exact wording of the sentence you agreed to, stored with a version number so we can always show what you actually consented to.
- A one-way fingerprint of your IP address
- Your IP address is combined with a secret value and hashed. The hash cannot be turned back into your address. It exists only so we can spot one source submitting thousands of signups, and it is never used to identify or locate you.
- Timestamps
- When you signed up, when you confirmed, and if applicable when you unsubscribed.
Confirming your address
We use double opt-in: after you submit the form we email you a link, and you are only on the list once you click it. If you never click, we do not email you again.
Automated scanners in some corporate email systems click links before you see them, so a signup may register as confirmed without you having clicked. That does not change what we do with it.
Who else handles your data
We do not sell the list, rent it, or share it for anyone else's marketing. These are the services the site runs on, each of which necessarily touches your data to do its job:
- Supabase
- Hosts the database your signup is stored in.
- Resend
- Delivers the confirmation email.
- Cloudflare Turnstile
- Runs the bot check on the form. Cloudflare receives what it needs to decide whether the submission is automated.
- Vercel
- Hosts and serves the website itself.
- Vercel Web Analytics
- Counts page visits: which page, the referring site, approximate location, browser, operating system and device type. It sets no cookies; visitors are counted by a hash of the request that is discarded after 24 hours, and it is not linked to your email or signup.
- Needs counselConfirm each service's current sub-processor terms and data-processing location, and decide whether they need naming individually or can be described by category.
How long we keep it
If you unsubscribe, we keep a record that you did so, because that is how we make sure we do not email you again. If you later join the list again from the form, that record is replaced by the new signup, and you are back on the list only once you click the new confirmation link.
- Needs counselSet a retention period for unconfirmed signups that never complete double opt-in.
- Needs counselSet a retention period for the list after launch — indefinite until unsubscribe, or a fixed window.
Your choices
Every email we send carries an unsubscribe link. It works immediately and stays in effect unless you sign up again and confirm. You can also ask us to delete your row entirely by writing to [PRIVACY CONTACT EMAIL] from the address you signed up with.
- Needs counselDefine the process and response time for access, correction and deletion requests, and who is responsible for handling them.
Age
This is an adult product. You must be 18 or older to join the list, and the form will not accept a submission without that confirmation. We do not knowingly collect information from anyone under 18.
Where your data is handled
Bed Sauce operates from the United States and the list is intended for people in the United States.
- Needs counselDecide whether to accept signups from outside the US. Knowingly collecting EU or UK addresses brings obligations well beyond this page, and the operating runbook currently recommends staying US-only at launch.
Changes
If this page changes in a way that affects what we do with information already collected, we will say so here and date the change.