RUNES

Privacy notice — review draft

Draft updated

Current scope

This draft concerns the pre-launch Runes website and its launch-list form. It does not describe the future Runes mobile app or services that are not used by this website.

Confirmed website data flow

The current form asks a visitor to enter an email address. The website also sends controlled values for language, signup location, and the version of the consent copy. The subscription service records the submission time.

The implementation is designed to keep the email address out of analytics events, application logs, and page URLs.

Selected services awaiting release verification

The current implementation is designed to send launch-list contacts to Brevo and to use Umami for limited website analytics when a production script is configured.

Umami is limited in code to page visits, primary call-to-action clicks, successful signups, and basic campaign source values. Advertising pixels, cross-site tracking, heatmaps, and session replay are outside the approved website scope.

Information required before publication

The final notice must be completed from the actual launch configuration and approved as one legal document in both languages.

  • Verified operator identity and public contact channel.
  • Approved purposes and legal bases for each processing activity.
  • Confirmed provider roles, data location, and contractual arrangements.
  • Approved retention, deletion, unsubscribe, and data-subject rights language.
  • Confirmed international-transfer safeguards and complaint route.
  • A launch-jurisdiction review of cookies, consent, and analytics requirements.