Privacy Policy

Last updated: 6 September 2026

This site (frostlete.com) is where we introduce Frostlete and collect requests for club access. This policy covers what we do with data on this marketing site only. Read the app privacy policy for information about member data.

Provider transfer arrangements, the club-access retention schedule and the legal basis for each processing purpose are being reconciled. This page identifies the open items rather than treating them as confirmed.

For an overview of the app’s export, deletion, and consent controls, visit GDPR & data rights.

Data controller

Frostlete is operated by Brendan Bennett, based in Amsterdam, the Netherlands. For any privacy question, email privacy@frostlete.com.

What we collect

  • Club-access requests — your name, email, and any club, role, country, team-size, priority or message details you provide, together with your marketing choice. We use these to follow up about club access and send a confirmation. Optional marketing follows the choice you provide.
  • Google Analytics — when configured, Google Analytics measures page visits and device and usage information. Consent settings govern analytics storage; Google tags can also send cookieless signals when storage is denied.
  • Server logs — our hosting provider (Vercel) handles request metadata such as IP address, user agent and timestamp to deliver and protect the website. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
  • Contact form submissions — if you email us or fill a contact form, we keep the message and your email to reply. Legal basis: legitimate interests.

Who we share it with

We use a small set of trusted processors:

  • Vercel — site hosting, request logs and Vercel Web Analytics
  • Supabase — database for club-access requests
  • Resend — club-access confirmation emails and contact management
  • Google Analytics 4 — website measurement when configured, with consent-dependent storage

Vercel Web Analytics is loaded separately from Google Analytics and measures website usage without analytics cookies.

We never sell personal data.

See the provider overview for the app and website integration inventory and the processing details still under review.

Cookies

See our Cookie Policy for cookie information. Cookie storage choices and cookieless analytics are different: declining analytics storage does not necessarily stop all measurement requests. You can change your choice anytime from the footer.

Retention

  • Our published waitlist retention commitment is until launch plus 90 days, or until you unsubscribe.
  • Google Analytics retention is a property setting; the configured period is under review.
  • Hosting-log retention depends on the provider configuration and is under review.
  • Our published contact-message retention commitment is 24 months after resolution.

The retention schedule for the current club-access workflow and enforcement of the published periods are under review. Contact privacy@frostlete.com for information about a particular record. The review does not extend the published retention commitments.

Your rights

Where GDPR applies, you have the following rights, subject to their conditions and exceptions:

  • Access the data we hold about you
  • Correct it if it's wrong
  • Have it erased
  • Export it in a portable format
  • Withdraw consent at any time (including cookie consent via the footer link)
  • Object to processing based on legitimate interests
  • Lodge a complaint with your local data protection authority (in NL, that's the Autoriteit Persoonsgegevens)

Email privacy@frostlete.com to make a request. GDPR normally requires a response within one month. See our request guidance for extensions and conditions.

Changes to this policy

We'll update the “Last updated” date at the top whenever this policy changes. Material changes will be announced on the site.