Privacy Policy

Who we are

Rig & Rivet operates rigandrivet.com to share three mechanical workout-counter concepts that are still in development and to run a launch list for people who want updates about them. Questions or requests: the contact address that will be published here before launch.

What we collect

When you join the launch list, we store:

• your email address;
• the concepts you chose, and the expected price shown for each at the time;
• when you agreed, and which version of the signup wording you saw;
• whether and when you confirmed your email, and whether and when you unsubscribed;
• where the visit came from: campaign tags in the link (UTM parameters), the page you first landed on, and the domain of the referring website, if any;
• if you choose to answer it after confirming: how likely you are to buy at the expected price, and what matters most to you.

We do not ask for or store your name, postal address, phone number or payment details. Nothing is for sale on this site.

Security and abuse prevention

The signup form is protected by Cloudflare Turnstile, which receives technical information from your browser (including your IP address) to tell people from bots. Our own rate limiter uses a one-way, salted hash of your IP address, which is deleted automatically within about two days; we do not store raw IP addresses with your signup.

Analytics

We use Vercel Web Analytics and Speed Insights to count page views and measure site performance. These Vercel tools do not set cookies and do not track you across other websites. Addresses of confirmation and unsubscribe pages are stripped of their tokens before any measurement is sent. We do not use advertising pixels, and we never upload email addresses to advertising platforms.

Cookies and browser storage

• After you confirm your email, we set one first-party cookie, rr_confirmed. It holds the code from your confirmation link so the next page can offer the optional price question. Scripts on the page cannot read it, it is sent only to that page, and it expires after 24 hours.
• From your first page view, your browser’s session storage (rr_attr_v1) holds the page you landed on, any campaign tags in the link and the referring website’s domain. It is sent to us only if you join the list, and your browser clears it when you close the tab.
• Apart from these, this site sets no cookies of its own, and none for advertising or cross-site tracking.

How we use your information

• to send the confirmation email you asked for;
• to send updates about the development and launch of the concepts you chose;
• to understand, in aggregate, which concepts and campaigns attract genuine interest;
• to keep the form free of spam and abuse.

Joining the list for a product is not consent to unrelated marketing. If we ever want to send anything else, we will ask separately.

Who processes it for us

We use these service providers to run the site and the list:

• Supabase: database hosting for the launch list;
• Vercel: website hosting, analytics and performance measurement;
• Cloudflare: Turnstile bot protection on the signup form;
• Resend: delivery of confirmation and update emails.

They process data on our behalf, may do so in the United States and other countries, and are bound by their own terms and privacy commitments. We do not sell or rent your information.

How long we keep it

• Signups that were never confirmed are deleted automatically about 30 days after the most recent confirmation email.
• Confirmed signups are kept until you ask us to delete them.
• If you unsubscribe, we stop emailing you but keep your record, including the concepts you chose, the signup details listed above and any survey answers, marked as unsubscribed so we never email you again by mistake. To remove it entirely, choose “Unsubscribe and delete my data” on the unsubscribe page or write to us.
• Rate-limiting hashes are deleted automatically within about two days.

Your choices

• Every email has an unsubscribe link that opens a page where one button confirms it. Many mail apps can also show their own unsubscribe button, which works without visiting this site.
• The unsubscribe page also lets you delete your email address and preferences from our list entirely.
• You can ask for a copy of your data, a correction or deletion by writing to the contact address that will be published here before launch. We may need to confirm the request comes from the owner of the address.

Children

This site is not directed to children under 16, and we do not knowingly collect their information.

Changes

If we change how we handle data, we will update this page and its version. Material changes affecting the launch list will be emailed to subscribers. See also our Terms of Use.