Dread Level waitlist privacy

Your choice

The signup choice is: “I'd like one email from Dread Corp when Dread Level is available.” The checkbox is unchecked until you choose it.

Dread Corp uses your email to manage your signup and send the one Dread Level availability note you request. We also keep signup status and the time and version of your consent. Signing up does not enroll you in a newsletter, beta or paid plan.

What we keep

The signup record contains your email address, consent time and version, pending or notified status, and a notice count of zero or one. We use keyed identifiers to match signups and record deletions. These identifiers can still relate to your address; they are not anonymous.

We also use keyed counters derived from your IP address to limit repeated requests. Old counters are pruned through later signup requests and private maintenance. A ten-minute rate-limit window is not a ten-minute deletion guarantee.

Providers and connection information

Cloudflare provides website delivery and the primary waitlist database. That database is configured for U.S. jurisdiction. Cloudflare also processes connection and security information to deliver and protect the website through its global infrastructure; the database setting does not mean all processing occurs in the United States.

Provider connection and security records have retention separate from the signup record. Our signup-erasure deadline does not promise deletion of those provider records.

How long your signup stays active

We keep a pending signup until its one availability note has been sent, you withdraw after address verification, or we close the waitlist. We erase the signup from the primary database within seven calendar days of that event. Verified withdrawals are excluded from later recipient preparation.

Backups and deletion

We take daily encrypted snapshots and keep them for seven days on a private device controlled by Jack. Jack controls the recovery keys. We keep a separate, current encrypted deletion record and check it before restored signups become eligible, suppressing previously erased signups.

Protected deletion identifiers remain until all relevant recovery windows have expired and their removal has been checked. Cloudflare database recovery copies can remain after primary erasure. Removing a signup from the primary database does not mean immediate erasure from every backup or provider recovery copy.

Contact and your requests

Email Jack at jack@dreadcorp.net to withdraw or request access to or correction of your own signup. We verify control of the address before providing or changing its record. Verification for a request does not sign you up for anything.

Jack checks the privacy mailbox at least weekly and aims to answer within seven calendar days. We remove resolved request and verification correspondence, including proof values, from our active mail storage within seven calendar days of resolution. Mail-provider recovery copies and logs can have separate retention.