Last updated 14 August 2026 Lire en français Leggi in italiano Ler em português Lees in het Nederlands

Privacy

Joining the waitlist means giving us an email address. We use it to email you once, when your invite is ready. We don't sell it and we don't share it. We count page views, and that count can't be traced back to you or to anybody else.

Who we are

Nutunes Group is the data controller for everything described here, and answers the requests under Your rights below. You can reach us at nutunes@william-moore.com.

What we collect

When you join the waitlist we store:

• your email address
• the date and time you signed up
• a fixed label of fan, which the signup function records for every entry

That is the whole record. There is no name field, no phone number and no profile. Nothing you do on the page is recorded either. Which cards you swipe, what you play, how far you read: none of it is measured in the first place.

Separately, and like any website, the servers that deliver this page keep standard access logs that include your IP address and browser user agent. Those exist to run the site and keep it secure, and they aren't connected to your waitlist entry.

Why we collect it, and on what basis

To tell you when Nutunes opens, and to organise the early access rounds.

The legal basis is your consent, under Article 6(1)(a) GDPR. You gave it by entering your address and pressing Get early access, and you can withdraw it at any time. Withdrawing doesn't affect anything we did while the consent stood.

Giving us your email is entirely voluntary. The only consequence of not giving it is that we can't tell you when we launch.

Who else touches it

• Our database provider: hosts the database the waitlist lives in, as our processor under a data processing agreement. Your browser sends the address to it directly, so it also sees the IP address the signup arrived from.
• Our website hosting provider: serves these pages, keeps the access logs described above, and runs the page-view count. The count reaches them on the same connection that served you the page — it goes to no third party, because for this one they are not a third party.
• Apple: the cover art on the demo cards, and the thirty-second previews behind the play button, are loaded from Apple's servers rather than copied onto ours. Asking Apple for a file tells Apple your IP address and browser, the way loading any image from anywhere does. The art loads with the page; a preview only when you press play. We send Apple nothing about you and receive nothing back about you.

Nobody else. The list isn't sold, rented, or shared with advertisers, and it isn't fed to the page-view count either — that count never sees an email address, and there is nothing in it that could be matched back to one.

Where it's stored

The waitlist database runs in Frankfurt, Germany, inside the EU. The provider is a US company; where its staff access EU-stored data to support the service, that transfer is covered by its data processing agreement and the European Commission's Standard Contractual Clauses.

The access logs are a separate matter: they sit with whoever is serving the page, on a network that spans several countries, so some of them will be held outside the EU under the same kind of clauses. They hold no waitlist entry, only the ordinary record of a request for a file.

How long we keep it

Until the waitlist has done its job. Once invites have gone out and the launch rounds are finished we delete the list, at the latest 24 months after you signed up. Ask us to remove you before then and we'll do it right away.

Your rights

Under the GDPR you can ask us to:

• give you a copy of what we hold about you (access)
• fix it if it's wrong (rectification)
• delete it (erasure)
• stop using it while something is disputed (restriction)
• send it to you or somewhere else in a portable format (portability)
• honour your withdrawal of consent, at any time and for any reason

Email nutunes@william-moore.com and say what you want. One request covers any of these, and we'll answer within one month. Given what the record actually is (an address and a timestamp), it rarely takes that long.

If you think we've handled your data badly, you're entitled to complain to the data protection authority in the EU country where you live, where you work, or where the problem happened.

Cookies and tracking

No cookies, no advertising, and no tracking scripts. There is one measurement tool: Vercel Web Analytics, which counts page views.

It sets no cookie and stores no identifier, on your device or ours. It does not follow you between visits, between sites, or between one page here and the next, so it cannot build a picture of a person — only of a page. What we see is how many times a page was opened, roughly where in the world from, and what kind of device and browser it was. Nothing in that is joined to your email address or to anything else you have given us.

One thing is written to your browser, and only when you ask for it: a preference you set yourself. Choosing a language on the waitlist page saves that choice in your browser's local storage, so the page opens in that language next time. It is a single word, it never leaves your device, nothing is stored beside it, and clearing your browsing data removes it.

That is why there is still no consent banner. Consent is for keeping things on your device that you didn't ask for, and for building a profile of you. A setting you chose yourself by pressing a button is neither.

Automated decisions

Nothing here profiles you or makes automated decisions about you.

Changes to this notice

If this notice changes, the date at the top changes with it. If a change materially affects what we do with your email, we'll email the people on the list before it takes effect.