Privacy Policy

1. Who we are, and what this covers

Frontage is an independent project, run by an individual based in Poland and not yet a registered company. That individual is the controller for the data described here, in a personal capacity, and is named in section 9.

This policy covers this website and the early-access form on it. There is no product, no account and no payment, so nothing else collects anything. The site is meant for business users aged 18 or over. When Frontage becomes a real service, this policy will be replaced by one that describes it.

2. What we collect

Two things, and nothing beyond them.

• What you type into the form: Your email address and the e-commerce platform you use, both required; your product category and the number of sites you run, both optional. We also record the date and time you submitted it.
• What our hosting records: Your IP address, the approximate city it points to, your device and browser type, and the pages you viewed. This is measured in aggregate, to keep the site working and to see how many people visit.

Giving us your details is entirely voluntary. The only consequence of not giving them is that we cannot add you to the list — nothing on the site is withheld.

3. Why we use it, and our legal basis

Under the GDPR every use of your data needs a legal basis. Ours are:

• To email you about early access — consent: You tick the box, we store your entry and email you about Frontage's launch and early access. Article 6(1)(a). You can withdraw your consent at any time, and withdrawing it does not undo anything we did while it was valid.
• To understand demand — legitimate interests: We look at which platforms and product categories come up most often, so we know what to build first. Article 6(1)(f): we read this in aggregate, never person by person, and you can object at any time.
• To run and protect the site — legitimate interests: Serving pages, keeping the site up, blocking abuse, and counting visits. Article 6(1)(f): our interest is a working, measurable website, and it is a light touch on your privacy.

We do not make automated decisions about you, and we do not profile you.

4. Who else can see it

Two suppliers, each acting only on our instructions under a data processing agreement:

• Supabase: Hosts the database that stores what the form collects.
• Vercel: Hosts the website, and provides the traffic and performance measurement described in section 6.
• Nobody else: We never sell your data, never share it for advertising, and never hand it to anyone else unless the law obliges us to.

Where one of these suppliers processes data outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses under that supplier's data processing agreement. You can read them in full: the Supabase DPA and the Vercel DPA.

5. How long we keep it

We keep what you submit until you ask us to delete it, and in any case no longer than 24 months from the day you sent the form. When Frontage launches we will ask whether you want to stay on under a new policy — we do not keep the list indefinitely on the strength of this one.

Server logs kept by our host are held only briefly, a few days at most, under its standard settings. When you ask us to delete your data we remove it from our live systems at once; any copy sitting in a routine backup falls away as that backup is rotated out.

6. Cookies, analytics and security

There is no cookie banner on this site, because the single cookie it sets is exempt from consent, and nothing else is stored on your device:

• One functional cookie: If you open the site in a language other than the one your browser asks for, it stores that choice in a single cookie, NEXT_LOCALE, so your next visit stays in the language you chose. It holds only a language code, never identifies or tracks you, and is exempt from consent as a functional preference.
• Cookieless analytics: Vercel Web Analytics and Speed Insights count visits and measure page speed without setting a cookie and without storing anything in your browser. Visitors are identified by a hash that is discarded after 24 hours.
• No tracking: No advertising cookies, no third-party trackers, no profiling across other websites. Our fonts are served from our own domain, so opening a page does not tell anyone else that you visited.

Everything travels over an encrypted connection, and access to the stored submissions is limited to what running the site requires. No system is perfectly secure, but what we hold is deliberately small.

7. Your rights

Over the data described above, you can ask us to:

• Access: Tell you whether we hold anything about you, and send you a copy of it.
• Correct: Fix anything that is wrong or incomplete.
• Delete: Erase what we hold. Nothing obliges us to keep a waiting list, so we will.
• Restrict or object: Stop using it in a particular way, including telling us to stop emailing you.
• Hand it back: Send you what you gave us in a machine-readable file.
• Withdraw consent: Take your consent back at any time — every email we send has an unsubscribe link, or just write to us. It is as easy to withdraw as it was to give.
• Complain: Lodge a complaint with a data protection authority. Ours is the Polish UODO, and you can also go to the authority in the country where you live.

Write to tim.sarokin@frontage.solutions. We answer within one month, and asking costs you nothing — we will not treat you differently for it.

8. Changes to this policy

If we change this policy we update the date at the top. If a change is significant — a new purpose, a new supplier, a longer retention period — we email everyone on the list before it takes effect.

9. How to contact us

For anything in this policy, including any of the rights in section 7:

Controller

Tim Sarokin

Email

tim.sarokin@frontage.solutions

Based in

Poland

Frontage is not yet a registered company; it is run in a personal capacity by the individual named above.