This policy describes what data the marketing site at pretensor.ai (the “Site”) collects, why we collect it, who processes it on our behalf, and the rights you have over it. It covers the website only. The Pretensor open-source CLI is governed separately by its Privacy Model — the CLI runs locally, reads only schema metadata from databases you point it at, and does not phone home.
1. Who we are
The Site is operated by Pretensor. For any privacy question, write to hello@pretensor.ai.
2. What we collect
2.1 Email address (waitlist)
If you submit the waitlist form, we store the email address you provide and whether you have confirmed it by clicking the link we email you. We do not ask for and do not store any other personal data here.
Lawful basis (GDPR): your consent at the moment of submission, paired with a pre-contractual interest in being notified when hosted Pretensor becomes available. You may withdraw consent at any time (see Section 7).
2.2 Anonymous product analytics
The Site uses PostHog to understand which sections of the page are read, which CTAs work, and where people drop off. PostHog is configured in cookieless mode on this site:
- No cookies are set for analytics.
- No persistent identifier is written to your browser — events live in memory for the current page session and do not link to any future visit.
- If you submit your email to the waitlist, that email is associated with analytics events from the same session, so we can correlate your funnel. We do not use it to build a profile across visits.
- We honour the Do Not Track signal: when your browser sends it, PostHog does not capture events.
The events we capture are aggregate signals about how the page is used — page views, CTA clicks, FAQ expansions, waitlist submission outcomes. No keystrokes, no form contents (other than the email above, which you submit voluntarily), no session recordings.
PostHog stores this data in its EU region.
2.3 Server logs
The Site is served from Cloudflare. Cloudflare logs basic request metadata (timestamp, URL, response status, IP address, user agent, approximate geography) for security, abuse protection, and operational debugging. These logs are not used for marketing.
2.4 Local browser storage
The Site uses your browser’s local storage only for strictly functional purposes — remembering your light/dark mode preference and caching the latest published version number from PyPI so we don’t refetch it on every visit. No tracking, profiling, or advertising data is stored locally, and you can clear it any time from your browser’s settings.
3. Cookies
The Site does not set any tracking, advertising, or analytics cookies. We do
not use a consent banner because there is nothing to consent to: analytics is
cookieless, and the only browser storage we use is the strictly functional
localStorage entries listed in 2.4.
4. Subprocessors
We use a small number of third-party services to run the Site. Each one receives only the data it needs for its purpose:
| Service | Role | Region |
|---|---|---|
| Cloudflare | Hosting and CDN | Global edge |
| Supabase | Waitlist database | EU |
| Resend | Transactional email (waitlist confirmation) | EU / US |
| PostHog | Cookieless product analytics | EU |
5. International transfers
Where data leaves the European Economic Area (for example, when Cloudflare serves a request from a non-EU edge), we rely on the providers’ standard contractual clauses and equivalent safeguards. The waitlist database, the email sender, and the analytics endpoint are all configured in EU regions.
6. Retention
- Waitlist email: kept until hosted Pretensor opens or until you ask us to delete it, whichever comes first. If you confirm, we keep it so we can notify you; if you don’t confirm within a reasonable window, unconfirmed rows are pruned periodically.
- Analytics events: retained per PostHog’s default retention for our project tier. We do not export this data elsewhere.
- Server logs: retained per Cloudflare Workers’ default log retention window.
7. Your rights
Under the GDPR (and equivalent laws), you have the right to access, correct, export, restrict, or delete personal data we hold about you, and to withdraw consent for processing based on consent. To exercise any of these rights, email hello@pretensor.ai from the address concerned. We will respond within 30 days.
You can also lodge a complaint with your local data-protection authority.
8. Security
The waitlist database is not publicly readable or writeable; only our server-side endpoints can access it, and confirmation links are signed tokens that expire after 24 hours.
9. Children
The Site is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe we have, write to us and we will delete it.
10. Changes
If we change this policy in a material way, we will update the effective date above and, if you are on the confirmed waitlist, notify you by email.
11. Contact
Questions, requests, or complaints: hello@pretensor.ai.