Privacy
Right now this site does one thing: it takes an email address so we can tell you when the first cohort opens. This page covers that, and it sets out the posture the product itself is built on. Face photos are sensitive, so we explain the different photo categories before asking you to trust us with them.
What we collect on this site
- Your email address, when you submit the waitlist form. That’s the only thing the form asks for.
- A referral code, if you arrived through someone else’s share link, so we can credit them.
- Signup security data: the connection’s IP address is used to limit repeated requests. If Turnstile is enabled, Cloudflare also checks a verification token before the signup is sent to Waitlister.
- Basic, aggregate traffic data: page views and rough referrer, so we know whether anyone is reading this. We do not build advertising profiles and we do not run third-party ad trackers.
We do not ask for your name, your phone number, or a photo to join the waitlist. There is no account to create yet.
The “Reduce motion” choice is saved in this browser’s local storage so it remains selected on your next visit. That preference is not sent with your signup.
What we do with it
We send a signup confirmation when required, then email you when your wave of the first cohort opens. No drip sequence, no newsletter you didn’t ask for, no "partner offers." Every email we send carries a one-click unsubscribe, and unsubscribing removes you from the list entirely.
We never sell your data. Not to advertisers, not to data brokers, not to anyone.
Photos, faces, and consent
The waitlist doesn’t touch photos. This section describes how the product is engineered, so you can decide now whether you want to be in the room later.
- Capture photos. The prototype uses a default 24-hour deletion schedule for source photos in our systems. One reference front photo can be retained for future previews only with a separate, revocable opt-in. Reference images brought to the consultation follow the source-photo deletion schedule.
- Saved previews and outcome photos. Generated previews attached to a client and after photos can remain in the private client record. They are distinct from temporary capture photos and are removed through the client-record deletion process. Anonymous previews follow the default source-photo timer.
- Reference-photo consent. Consent is recorded per person. Withdrawing reference-photo consent removes the retained capture photos. It does not by itself delete the entire client record or every saved preview; client-record deletion is a separate action.
- Analysis and deletion. Coarse hair and face-shape analysis may remain between visits. Facial landmark arrays are not stored. Client-record deletion removes associated records and photos; consent and deletion audit logs are retained to document those actions.
- Rendering provider. Generating a preview sends a photo to a third-party rendering provider. Its current default retention is longer than our capture-photo timer. Aligning those periods is work to complete before the first cohort opens; we will update this policy with the provider and final retention terms before access begins.
- No training without explicit consent. Nothing you give us trains a model unless you specifically, separately, and revocably say yes. The default is no.
- Labelled, always. Anything the system generates is marked as a preview, never dressed up as a photograph of a real outcome.
Who else touches your data
Cloudflare hosts the website and handles its signup endpoint. Waitlister receives the email address and, when supplied, the referral code to manage the queue and signup emails. If enabled, Cloudflare Turnstile verifies signup requests. The product’s rendering provider and its final retention terms will be named before cohort access opens.
How long we keep it
Waitlist emails are kept until the first cohort has fully opened, or until you ask us to remove you, whichever comes first. After that, they go.
Your rights
Wherever you are, you can ask us for a copy of what we hold on you, ask us to correct it, or ask us to delete it. If you’re in the UK, EU, or a jurisdiction with comparable law, those are legal rights and we’ll honour them within the statutory window. Honestly, we’d do it anyway. One email is enough:
Adults only
Strandly is for people aged 18 and over. We don’t knowingly collect data from anyone younger. If you believe a minor has given us data, tell us and we’ll delete it.
Changes
If this page changes in a way that matters, we’ll say so here and date it. We won’t quietly widen what we’re allowed to do with data you’ve already given us.
Contact
Questions, requests, or complaints: privacy@strandly.ai.
Anything else: hello@strandly.ai. A person reads it.