PRIVACY POLICY
1. Who We Are
Pocabit is a K-pop photocard collection tracker currently in pre-launch, operated as a private project based in Austria.
Privacy contact: hello@pocabit.app
We will update this section with full legal entity details when the business is formally registered. For any questions about your data, contact us at the address above.
2. What Data We Collect
On this waitlist page, we collect only the following:
| Data | Why | Legal basis |
|---|---|---|
| Email address | To notify you when Pocabit launches and send alpha access invites | Consent (Art. 6.1.a GDPR) |
| Technical data (IP address, browser type, referrer) | Standard server logs; used to understand traffic sources and detect abuse | Legitimate interest (Art. 6.1.f GDPR) |
We do not collect your name, phone number, payment information, or any other personal data at this stage.
3. How We Use Your Email
Your email address will only be used to:
- Notify you when Pocabit launches or when alpha access opens
- Send product updates, if you have opted in
We will not send you third-party marketing emails. We will not sell or share your email address. You can unsubscribe at any time via the link in any email we send, or by emailing hello@pocabit.app.
4. Third-Party Services
We use the following services that may process your data:
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database — stores your email address for the waitlist | EU (Frankfurt, Germany) |
| Vercel | Website hosting and server logs | EU edge nodes; some US processing |
| Vercel Analytics (if enabled) | Privacy-friendly pageview analytics — no cookies, no fingerprinting | Aggregated only; not personally identifiable |
All third-party processors are contractually bound to GDPR standards via Data Processing Agreements. For transfers outside the EEA (Vercel’s US infrastructure), we rely on Standard Contractual Clauses (SCCs).
5. How Long We Keep Your Data
| Data | Retention |
|---|---|
| Waitlist email address | Until you unsubscribe, or 12 months after Pocabit’s public launch — whichever comes first |
| Server logs (IP, browser) | Up to 30 days, then automatically deleted |
6. Your Rights Under GDPR
As a person in the EU, you have the following rights:
- Access (Art. 15): Request a copy of the data we hold about you
- Rectification (Art. 16): Correct inaccurate data
- Erasure (Art. 17): Request deletion of your data
- Restriction (Art. 18): Ask us to limit processing in certain circumstances
- Portability (Art. 20): Receive your data in a machine-readable format
- Object (Art. 21): Object to processing based on legitimate interest
- Withdraw consent (Art. 7.3): Unsubscribe or withdraw consent at any time
To exercise any of these rights, email hello@pocabit.app. We will respond within one month.
7. Cookies
This waitlist page does not use tracking or advertising cookies. No cookie consent banner is required. Vercel may set a strictly necessary session cookie for security purposes, which does not require consent under GDPR.
8. Children
Pocabit is not directed at children under 14 years of age (the minimum age for digital consent in Austria under Art. 8 GDPR). If you are under 14, please ask a parent or guardian before signing up.
9. Changes to This Policy
We will update this policy as Pocabit evolves — particularly when the full app launches and we collect additional data. For material changes, we will notify waitlist subscribers by email at least 14 days before they take effect.
10. Complaints
If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Austrian supervisory authority:
We encourage you to contact us first at hello@pocabit.app so we can resolve your concerns directly.
11. Contact
Pocabit
Email: hello@pocabit.app
Web: pocabit.app