Privacy policy

Who is responsible?

The data controller is NTM, a French SAS with a share capital of €2, trading as Automate, 101 953 701 R.C.S. Paris, 25 rue de Ponthieu, 75008 Paris, France, publisher of BackFridge. For any question about your data: BackFridge.app@gmail.com.

What data, and what for?

Waitlist. When you sign up, we record:

• your email address (the only required field);
• your phone, iPhone or Android, if you choose to tell us;
• the language and colour of the site you saw, and the form you used;
• where your visit came from: campaign parameters (utm), any ref code, the main address of the site you came from and your landing page;
• the date you signed up and the version of the information text shown under the form;
• the dates the confirmation email was sent, you confirmed and, if applicable, you unsubscribed.

We use this data to let you know when BackFridge launches, to verify your address (confirmation link sent by email), to avoid duplicate emails and to understand which channels bring people to us. Legal basis: your consent, given when you sign up and confirmed through the link you receive. You can withdraw it at any time with the unsubscribe link in every email, without affecting what was done before.

Team notification. For every signup, the BackFridge team receives a summary email in its Gmail inbox: your address and the information above, never your IP address. Legal basis: our legitimate interest in following signups.

Abuse protection. To limit automated signups (5 attempts per 10 minutes), your IP address is used for the duration of the request; we only keep a fingerprint of it computed with a secret key, which changes every day and is gone within 3 days. Legal basis: our legitimate interest in protecting the service.

Audience measurement. We measure site traffic with Umami, without cookies and without any data that identifies you (see “Trackers”). Our server also counts signups, confirmations, unsubscribes and clicks on the contact address, without any personal data. Legal basis: our legitimate interest in understanding how the site is used.

No automated decisions, no profiling, no selling of data, no targeted advertising.

Who receives this data?

The BackFridge team (NTM) and our service providers, each for its own part:

• Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, United States): sending emails and storing the waitlist;
• Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, United States): website hosting; Vercel processes the technical connection data needed to serve the pages securely;
• Umami Software, Inc.: anonymous audience measurement, data hosted in the European Union;
• Google (Gmail): the team's inbox, which receives the notification emails.

Transfers outside the European Union

Resend and Vercel are based in the United States and process data there. These transfers rely on the EU-US Data Privacy Framework, to which Vercel and Resend state that they adhere, and, for Resend, on the European Commission's standard contractual clauses included in its data processing addendum. Google LLC also adheres to the Data Privacy Framework. Umami statistics stay in the European Union.

How long?

• signup never confirmed: deleted 30 days after signing up;
• confirmed signup: kept until launch and at most 3 years after our last contact with you;
• after unsubscribing: your address stays flagged as “unsubscribed” so that no email goes out, then it is deleted 3 years later; you can ask for immediate deletion;
• emails sent: Resend's sending log keeps them for 30 days;
• notification emails received by the team: deleted on request, and at the latest 3 years after receipt;
• IP address fingerprint: erased within 3 days;
• Umami statistics: anonymous, kept for 6 months.

Your rights

You can at any time access your data, have it corrected or erased, ask for processing to be restricted, object to it, ask for data portability and withdraw your consent. You can also set instructions for what happens to your data after your death. Email us at BackFridge.app@gmail.com: we reply within one month. To unsubscribe, the link in every email is enough, and it takes effect immediately.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.

Trackers

The site sets no advertising or audience-measurement cookie: no banner to click through. Only these items may be stored on your device:

• bf-theme (local storage): the site colour (blue or green), the date it was chosen and, during a colour test, a note that it was randomly drawn; no identifier; forgotten after 13 months;
• bf-locale (cookie): the language you chose with the language selector or the language suggestion, kept for 1 year; set only when you make that choice;
• bf-attrib (session storage): where your visit came from (campaign parameters, referring site, landing page); erased when the tab closes, sent only with a signup;
• bf-draft (session storage): the email address and phone typed into the form, so they are not lost if the network drops; erased after signing up or when the tab closes.

These items are exempt from consent under the CNIL guidelines (deliberation no. 2020-091 of 17 September 2020): they strictly serve a service you ask for (keeping your input, language or colour), or are limited to measuring the site's audience on our behalf only, with anonymous data and a lifetime of 13 months at most.

Umami, our audience measurement tool, sets no cookie and keeps no data that identifies you: it produces anonymous statistics (page views, referrers, device type, country, site language and colour, form steps, never your email address). It respects your browser's “Do Not Track” setting. Data hosted in the European Union and kept for 6 months.

Version of this text

The information text shown under the form has a version (2026-10-fr-v1 in French, 2026-10-en-v1 in English, and so on with each language's code), recorded with every signup. If it changes, its version changes and this page is updated.