Privacy Policy

Who we are

Flowdealer OÜ is the data controller for this site — an Estonian company (registry code 17377861, VAT EE102943735). For any privacy question, or to exercise the rights below, email privacy at flowdealer.ai.

What we collect

Email + opt-in preferences. When you subscribe via one of our forms, we store your email, the form you used, the edition slug, and your opt-in choices (Reveal launch, future research). If you arrived through a campaign link, we also store its source tags (utm_source / utm_medium / utm_campaign) so we know which outreach reached you. We send a confirmation email and store a timestamp once you confirm. We don't ask for your name, and we don't collect anything else.

Why we process it

We process your email on the basis of your consent, given when you subscribe and confirmed by the email you click. Our aggregate, cookieless analytics run on our legitimate interest in understanding how the report is read. You can withdraw consent at any time — see Your rights.

How we process it

• Plausible Analytics — our analytics processor; cookieless and EU-hosted (Germany).
• Cloudflare — hosts the site and stores subscription records (Cloudflare D1). Edge-side Core Web Vitals only; no device-stored data.
• Resend — sends our confirmation and notification emails. Delivery is configured to the EU region (Ireland).

These providers act as our data processors. Plausible and our Resend email region are in the EU; Cloudflare and Resend are US-incorporated, so where any personal data is processed outside the EEA we rely on appropriate safeguards (the European Commission's Standard Contractual Clauses).

How long we keep it

Unconfirmed signups expire after 7 days and are purged within about 30. Confirmed subscriptions are kept until you unsubscribe; unsubscribing removes you from the relevant list.

Your rights

You can ask us to access, correct, delete, restrict, or port your data, object to processing, and withdraw your consent at any time — just email privacy at flowdealer.ai. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local EU supervisory authority.

Analytics

Our analytics (Plausible) are anonymous: no cookies, no fingerprinting, no persistent identifiers, no profiles, and no tracking across other sites. The measurement is aggregate and the same for every visitor.

Do Not Track and Global Privacy Control let you signal that you don't want to be tracked. We don't track anyone — with or without those signals.

Cookies & local storage

This site sets no cookies, so no cookie banner is required. Your browser's local storage holds only your own preferences — your colour theme and your predict-reveal guesses — strictly necessary for the features you use and exempt under ePrivacy Art 5(3) + UK DUAA 2025 Schedule A1.

Dataset license

The Q2 2026 dataset is published under Creative Commons Attribution-NonCommercial 4.0 International (CC-BY-NC 4.0).

Opt-in scope

We email you only what the form you used said it would send — nothing else, no other lists. The scopes are: (a) a notification when Reveal (the identity assessment) opens, if you opted in; (b) new research edition announcements, if you opted in; (c) if you signed up on the pre-release page, a single email when the report goes live — any further mail requires a fresh opt-in we'll offer in that email. Every email includes an unsubscribe link; you can leave either list (or both) at any time.