Privacy Policy
Last updated:
Introduction
This Privacy Policy explains how Routeur (“we,” “us,” or “our”) handles personal information when you visit routeur.app or join our private beta waitlist.
Routeur is a trading terminal for prediction markets, currently in private beta. Our public website is a marketing site. Its only interactive feature is an email form for joining the waitlist. The website does not provide user accounts, logins, payments, or trading. Nothing on the website is an offer to trade.
This policy covers the public website and its waitlist, not activity within the trading terminal. Routeur is responsible for the personal information described here and is its controller where the GDPR or UK GDPR applies.
Information We Collect
When you submit a waitlist form and we accept your submission, we store:
- Email address. The email address you provide so we can contact you about the private beta and related product updates.
- Signup details. The date and time of signup and the page or form you used.
- Referral and campaign information. The referring URL and these campaign tags from the link you arrived on: utm_source, utm_medium, utm_campaign, and utm_content. We use this information, together with the signup page or form, only to measure which launch channels generate signups.
- Hashed IP address. A salted SHA-256 hash of your IP address. We do not store the raw IP address in our waitlist database. Hashing changes the address into a derived value; it does not mean the record is anonymous.
- Browser information. Your browser’s user-agent string, which describes the browser and may include operating-system or device information.
- Country. A two-letter country code that our hosting provider derives from your IP address. This is not precise location information.
We also run automated checks when you submit the form. We check whether your email domain can receive mail through a DNS lookup, reject known disposable-inbox domains, and use a hidden form field and a timing check to filter bots.
Rejected submissions are not stored as waitlist entries. Our hosting provider’s ordinary request processing and logging are separate from the waitlist database.
When you browse the website, Vercel processes visitor IP addresses and request logs to serve the site. Google also receives your IP address and browser details when your browser loads fonts from Google Fonts. These requests occur even if you do not join the waitlist.
PostHog collects page views, clicks, scrolling, referring URLs and campaign tags, browser and device information, anonymous visitor and session identifiers, performance measurements, and errors. Session replay records page content and interactions, including console logs and canvas content; form inputs and signup confirmation text are masked, and request bodies and headers are excluded. These measurements occur when you browse, even if you do not join the waitlist.
How We Use Information
We use the information described above for these purposes:
- Waitlist communications. To contact you about access to the private beta and product updates related to it.
- Launch-channel measurement. To understand which pages, referrals, and campaigns lead to signups.
- Abuse prevention and security. To filter spam and bots, limit excessive submissions, and protect the website and signup function.
- Legal compliance. To comply with applicable legal obligations.
We use PostHog analytics and session replay to understand website use, measure signup conversion, and diagnose performance problems and errors. We do not use advertising pixels or social plugins.
We do not use personal information to make solely automated decisions that produce legal or similarly significant effects. Our automated form checks are used to identify invalid submissions and prevent abuse.
How We Disclose Information
The providers involved in the website’s processing are:
- Database hosting — Supabase. We store accepted waitlist entries in a PostgreSQL database in the United States, using AWS’s us-east-1 region in Virginia. The data is encrypted in transit and at rest.
- Website hosting and analytics — Vercel. Vercel hosts the website and signup function, processes submissions and ordinary website requests, and applies rate limiting to the signup endpoint. Its processing includes visitor IP addresses and request logs. We also use Vercel Web Analytics, which counts page views, referrers, campaign tags, country, and browser and device type. It does not set cookies; it derives a visitor identifier from the request that is discarded daily and does not track you across websites.
- Website analytics — PostHog. We use PostHog US Cloud to process website usage, performance, error, and session replay data in the United States. We do not deliberately send waitlist email addresses as analytics properties or identifiers.
- Font delivery — Google Fonts. Your browser connects to Google to load website fonts. Google receives your IP address and browser details through that connection.
We do not disclose website or waitlist information to other third parties.
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
Using providers to host the website, store waitlist entries, or deliver fonts is distinct from selling information or sharing it for that advertising purpose.
International Transfers
Routeur operates from the United States, and our waitlist database is located in Virginia. If you visit from the European Economic Area, the United Kingdom, or elsewhere, your information is processed in the United States. Data protection laws there may differ from those where you live.
For transfers requiring safeguards under the GDPR, we use the European Commission’s Standard Contractual Clauses. For transfers requiring safeguards under the UK GDPR, we use the UK International Data Transfer Agreement.
These contractual safeguards address how transferred personal information must be protected. You can contact us at info@routeur.app to request information about the safeguards applicable to your data and a copy of the relevant terms.
Your Privacy Rights
Requests available to everyone
You can request access to, correction of, or deletion of your waitlist information. You can also ask us to stop sending waitlist and related product emails.
Email info@routeur.app and tell us what you would like us to do. We verify your identity by asking you to reply from the email address used to join the waitlist. You do not need an account to make a request.
European Economic Area and United Kingdom
Where the GDPR or UK GDPR applies, we rely on:
- Consent. For waitlist emails and related product updates. You can withdraw consent at any time by emailing us. Withdrawal does not affect the lawfulness of processing before you withdrew consent.
- Legitimate interests. For preventing abuse and protecting the website and signup function, and for limited launch-channel attribution. These interests must be balanced against your rights.
- Legal obligations. Where processing is necessary to comply with a legal obligation applicable to us under the relevant data protection framework.
Subject to the conditions and exceptions in applicable law, you may request access, correction, deletion, restriction of processing, and a portable copy of eligible information. You may object to processing based on legitimate interests because of your particular circumstances, and to direct marketing at any time. You may also complain to a supervisory authority, including the authority where you live or work in the EEA, or the UK Information Commissioner’s Office. The European Commission publishes an explanation of these rights.
California
Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies, California residents have rights to:
- Know and access. Request the categories and specific pieces of personal information collected, its sources, the purposes for using it, and the categories of recipients.
- Correct and delete. Request correction of inaccurate information and deletion, subject to legal exceptions.
- Opt out. Opt out of selling personal information or sharing it for cross-context behavioral advertising.
- Limit certain sensitive-information uses. Where the statutory right applies.
- Exercise rights without discrimination. Receive no unlawful discriminatory treatment for exercising privacy rights.
An authorized agent may submit a request on your behalf, subject to applicable verification requirements. These rights and their limits are described by the California Attorney General.
We do not sell or share personal information for cross-context behavioral advertising, so you do not need to submit a sale or sharing opt-out request.
We do not currently respond to Do Not Track or Global Privacy Control signals in a special way because we do not engage in that sale, sharing, or cross-site tracking. This does not affect your ability to exercise the other rights described above.
Retention
We keep waitlist entries until you ask to be removed or until 24 months after the private beta ends, whichever happens first. We then delete them.
Backend logs, including our hosting provider’s request logs, are retained for no more than 90 days unless needed for a security investigation. This exception applies to logs, not to a general extension of the waitlist retention period.
Session replay recordings are configured for 30-day retention. Browser storage is separate from our stored waitlist records, as explained below.
Security
We use encrypted transport and database storage, restrict the signup function to write-only database access, and provide no public read access to waitlist records. We also use rate limiting, automated abuse checks, limited data collection, and hashed rather than raw IP addresses in the waitlist database. These measures reduce risk, but no method of transmission or storage is completely secure.
Children
The website is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has submitted information, please contact info@routeur.app so we can address it.
Third-Party Services
Google Fonts is loaded directly from Google rather than served entirely from our website. Google’s handling of information it receives is also described in its own privacy notices.
This policy explains Routeur’s website practices. It does not replace the privacy notices of Vercel, Supabase, PostHog, or Google concerning their own processing.
Changes to This Policy
We will post changes to this policy on this page and revise the “Last updated” date above. The date identifies the most recent revision. This policy describes the public website and waitlist; it does not extend automatically to future account, payment, or trading features.
Contact
For privacy questions or requests, email info@routeur.app.
Routeur
626 2nd Street
San Francisco, CA 94107
Routeur is a company incorporated in Delaware, with its office in San Francisco, California.