lostinsidex Custom Card Club

Waitlist privacy.

What data I store when you join the waitlist, why, and for how long. The German version is the legally binding one.

1. Controller

The controller for data processing on this page is Chantal Jost (lostinsidex), Germany. My full address and contact details are in the imprint. For privacy questions you can also reach me at the email address listed there.

2. What I store

• your email address (required)
• your first name or name, your Instagram handle and the plan you are interested in, if you provide them
• when you signed up and when you confirmed, and the version of the consent text
• the language you signed up in, and whether and when the confirmation email was sent

3. Purpose and legal basis

I only use this data to tell you when the Custom Card Club launches and to give people on the waitlist early access. The legal basis is your consent (Art. 6(1)(a) GDPR). So that nobody can sign up someone else, you first get an email with a confirmation link (double opt-in). You are only on the list after clicking it. Logging the sign-up and confirmation serves as proof of your consent (Art. 6(1)(c) and (f) GDPR).

4. Withdrawal and unsubscribing

You can withdraw your consent at any time. Every email contains an unsubscribe link, or simply write to me. After unsubscribing you won't get any more emails.

5. Service providers

• Vercel (Vercel Inc., USA) hosts this website. When you visit, technically necessary access data such as IP address, time and requested page are briefly processed in server logs (Art. 6(1)(f) GDPR, secure operation of the site).
• Supabase (Supabase Inc., USA) provides the database that stores the waitlist. The database is located in a data center in the EU (Ireland).
• Resend (Plus Five Five Inc., USA) sends the confirmation email and the launch emails.

A data processing agreement (Art. 28 GDPR) is in place with every provider. Because these providers are based in the USA, access from the USA cannot be ruled out. Transfers are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

6. Retention

I keep your data until the club has launched and you have been informed, at the latest until you unsubscribe. Unconfirmed sign-ups are deleted after 30 days at the latest. I keep proof of your consent only as long as I am legally required to.

7. Cookies and tracking

This page sets no tracking or advertising cookies and uses no analytics tools. Fonts are loaded from this website, not from Google.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

Last updated: October 2026