Privacy Policy

The controller of your personal data is Crazy Curlers, Corso Luigi Einaudi 38, 10129 Torino, Italy.

For any privacy request you can write to m.elisacrazycurlers@gmail.com. We have not appointed a Data Protection Officer, as we are not required to do so.

Waitlist sign-up. We process the email address you submit, the language of the website at that moment, the section the form was submitted from and the date of registration, in order to notify you about the next drop and give you early access. Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the confirmation before submitting the form. Providing the data is voluntary, but without an email address we cannot notify you.

Colour vote. We store your vote together with a random technical identifier generated in your browser, used only to prevent duplicate voting. We do not know who you are from that identifier. Legal basis: our legitimate interest in a fair vote (Art. 6(1)(f) GDPR).

Crazy Ninja rewards. If you unlock a reward in the game, we store the score, the reward tier and the timestamp so the reward can be honoured. If you enter an email address to receive it, that email is processed on the basis of your consent.

Emails we send. Drop notifications and service messages related to your registration (for example the confirmation email) are sent to the address you provided.

Technical logs and security. Our hosting and backend providers process connection data (including IP address, user agent, timestamp) to deliver the website and protect it against abuse. Legal basis: legitimate interest in the security and availability of the service.

Cookies and similar technologies. See the Cookie Policy. Non-essential technologies only run with your consent.

We do not carry out profiling or automated decision-making that produces legal effects on you. We do not sell your personal data, and we do not share it for third-party advertising purposes.

Your data is accessible to us and to the providers that operate the website on our behalf, acting as data processors under Art. 28 GDPR:

• Lovable — website hosting and delivery.
• Supabase — database and backend infrastructure (EU region), storing waitlist entries, votes and game rewards.
• Resend — transactional email delivery for the messages we send you.
• Cloudflare — content delivery, caching and network protection.
• Google Fonts (Google Ireland Ltd.) — delivery of the website typefaces; your IP address is transmitted to Google to serve the font files.

Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses together with supplementary technical measures, in accordance with Chapter V GDPR.

• Waitlist email addresses: until you unsubscribe or ask for deletion, and in any case no longer than 24 months after the drop they relate to.
• Colour votes and the technical voting identifier: until the vote is closed.
• Crazy Ninja rewards: 12 months from the moment the reward is unlocked.
• Your cookie choice: 6 months, then you are asked again.
• Technical logs held by our providers: according to their standard retention periods.

You have the right to access your data, to rectify or erase it, to restrict or object to its processing, to data portability, and to withdraw any consent at any time without affecting the lawfulness of processing carried out beforehand. Every email we send includes an unsubscribe option, and you can adjust your cookie choices at any moment.

To exercise your rights write to m.elisacrazycurlers@gmail.com. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of your place of residence.

We collect the minimum data needed: no name, no phone number, no address is requested to join the waitlist. Form fields are validated and length-limited, database access is restricted by row-level security policies, and no analytics or advertising tracker is installed on this website.

You can review or change your consent whenever you want.

We may update this notice to reflect changes in the website or in applicable law. The date at the top always shows the current version; substantial changes reset the cookie banner so you can decide again.