Privacy Notice

Overview

This notice explains how AM Buffer (“we” or “us”) handles personal data when you visit ambuffer.com, join the waitlist, or contact us.

You can contact us at hello@ambuffer.com.

Information we collect

Waitlist information

When you join the waitlist, we collect:

• Your email address.
• Your selected platform: iOS or Android.
• Your optional answer about what distracts you in the morning.
• Your consent to receive product updates and an early-access invitation.
• Referral and campaign details, including the referring page and UTM source, medium, and campaign.
• The date and time of your signup.

We normalize email addresses and avoid creating duplicate waitlist records.

Limited first-party analytics

For limited first-party analytics, we record:

• An allowlisted event name for a page view, selecting a waitlist link, successfully joining, or using the share button.
• The page path.
• UTM source, medium, and campaign.
• The event timestamp.

These records do not include a browser identifier or advertising profile. We do not currently use PostHog, third-party product analytics, cross-site advertising trackers, or analytics or advertising cookies.

Technical information and correspondence

Cloudflare processes technical request information needed to deliver and protect the site. This may include:

• Your IP address.
• The request URL and headers.
• Browser or device information.
• Routing information and timestamps.
• Response status and security signals.
• Worker log metadata under our service configuration and Cloudflare’s policies.

If you email us, we receive:

• The contents of your message.
• Related email addresses.
• Delivery metadata.

How we use information

We use personal data to:

• Maintain and administer the waitlist.
• Send requested product updates and early-access invitations.
• Understand interest in iOS and Android and evaluate waitlist campaigns.
• Operate, secure, and improve the site and prevent automated abuse.
• Respond to questions and privacy requests.
• Meet security or legal obligations that apply to us.

Where applicable, we rely on your consent for waitlist marketing. We rely on our legitimate interests in operating, securing, and evaluating this early-stage project for limited analytics and abuse prevention, subject to applicable law. We may also process information when necessary to meet a legal obligation. You can withdraw marketing consent at any time.

Cloudflare Turnstile

We use Cloudflare Turnstile to protect the waitlist from automated abuse. Turnstile evaluates technical and security signals under Cloudflare’s policies and returns a short-lived security token.

When you submit the form, the AM Buffer Worker sends the following to Cloudflare’s Siteverify service for server-side verification:

• The short-lived Turnstile token.
• Your request IP address, when available.

The AM Buffer application does not persist the Turnstile token or your request IP address in the waitlist D1 database.

Learn more in Cloudflare’s Turnstile Privacy Addendum and Privacy Policy.

Service providers and disclosure

We currently use:

• Cloudflare for DNS, site delivery, Cloudflare Workers, D1 database storage, technical log metadata, and Turnstile.
• GoDaddy and Titan for the hello@ambuffer.com mailbox. If we exchange email with you, message content, addresses, and delivery metadata are processed through that service. See Titan’s Privacy Policy.

We may disclose information when reasonably necessary to respond to lawful requests, protect AM Buffer or others, or investigate security incidents and abuse.

Retention

We keep waitlist information only while reasonably needed to manage the waitlist and send requested invitations or updates. We keep analytics only while reasonably needed to evaluate the waitlist and its campaigns, and correspondence only while needed to respond and maintain an appropriate record of the exchange. Security and legal information may be kept while reasonably required for those purposes.

When information is no longer needed, we delete or anonymize it. We will also act on a verified deletion request where applicable. If you withdraw consent or unsubscribe, we may retain a minimal suppression record containing your email address and opt-out status so that we do not contact you again. Provider-managed backups may retain deleted information temporarily until they rotate out.

International processing

The production D1 database was created using Cloudflare’s ENAM location hint for Eastern North America. A location hint is a best-effort placement preference, not a guaranteed data-residency restriction.

Cloudflare operates a global network. Cloudflare, GoDaddy, Titan, and their service providers may process information in countries other than where you live, and those countries may have different data-protection laws.

Your rights and choices

Depending on where you live, you may have the right to:

• Request access to or a portable copy of personal data we hold about you.
• Correct inaccurate information.
• Request deletion.
• Withdraw consent or object to certain processing.
• Complain to your local data-protection authority.

To withdraw waitlist marketing consent or make a privacy request, email hello@ambuffer.com. We may ask you to verify control of the relevant email address before we disclose, correct, or delete information. We do not currently rely on an automated unsubscribe system.

Children’s privacy

The waitlist is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided information, contact us so we can take appropriate steps.

Security

We use reasonable technical and organizational safeguards, including restricted database access, platform-managed secrets, server-side validation, a honeypot, and Turnstile verification. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this notice

We may update this notice as AM Buffer develops. We will publish the revised notice here and update the “Last updated” date. If a change materially expands how we use previously collected information, we will seek additional consent when required.