Privacy
The short version
- This site collects one thing: the e-mail address you type into the waitlist form. Nothing is collected if you do not.
- With it we store a consent proof: a salted SHA-256 hash of your IP address (never the address itself), your browser's user-agent string, a timestamp, and the exact wording you agreed to.
-
There is no analytics, no tracking pixel, no advertising network
and no third-party script on this site. The Content-Security-Policy
in
src/middleware.tspermits no external origins, so a tracker could not load even if one were added by mistake. - Everything runs on hardware in the Netherlands that the author owns and operates. Your address is not sold, rented or shared.
- Unsubscribing deletes the row. One click, no account, no reason required — here.
1. Who is responsible
The controller is Jarrel Pothoff, a private individual in the Netherlands, reachable at jarrel.pothoff@gmail.com.
There is no company behind Conductor. No Chamber of Commerce number or VAT identification number is printed here, because none is registered under this name — printing one registered to a different trade name would tell you that "Conductor" is a registered business, which it is not.
2. What is collected, and why
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| E-mail address | To tell you when Conductor is available, once. | Consent — Art. 6(1)(a) GDPR | Until you unsubscribe |
| Salted hash of your IP |
Proof that the consent was given, and from where — without keeping the
address. Hashed in the browser-facing server before it is sent onward
(src/lib/ip-hash.ts); the backend never sees a plain IP.
| Legal obligation to demonstrate consent — Art. 7(1) GDPR | With the signup |
| User-agent string, timestamp, consent wording version | The rest of the same proof. | Art. 7(1) GDPR | With the signup |
Referral code (only if you arrived via ?ref=) | So the person who shared the link is credited. It is a random code, not an identifier of you. | Consent — Art. 6(1)(a) GDPR | With the signup |
That is the complete list. There is no account, no profile, no cookie set by this site for tracking, and no field asking for your name, company or role.
3. Where it goes
The form posts to this site's own server, which hashes your IP and forwards the signup to a small waitlist service running in the same Kubernetes cluster, over internal cluster DNS — it is never exposed to the internet. Both run on a machine in the Netherlands operated by the author. The confirmation e-mail is sent from that same cluster over SMTP.
There are no sub-processors. No cloud analytics, no mailing-list SaaS, no CDN in front of this host, no hosted error tracker. This is a deliberately boring stack, and it is the reason this section is two paragraphs instead of a table of vendors.
4. What Conductor itself does with your data
Nothing, because you have no data in it. Conductor is a single-user harness that the author runs on their own machines to build their own software. It is not a hosted service, it has no sign-up, and multi-tenancy is explicitly out of scope. Everything this page describes happens on the website you are reading.
If that ever changes — if Conductor becomes something you can run or log into — this page gets rewritten before that ships, not after.
5. Your rights
Under the GDPR you may ask for access, correction, erasure, restriction, portability, or to withdraw consent. In practice, for a waitlist, that is one action: unsubscribe, which deletes the row. For anything else, e-mail jarrel.pothoff@gmail.com; you will get a reply from a person, because there is only one.
You may also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
6. Security
The site is served over HTTPS only (HSTS, forced redirect at the ingress), sets a restrictive Content-Security-Policy, and runs as a non-root user in a read-only container. The waitlist database is not reachable from the internet.
Found something? Please report it to jarrel.pothoff@gmail.com — see /.well-known/security.txt. There is no bounty, just a fast reply and credit if you want it.
7. Changes
The version and date at the top are the record. Material changes to what is collected will be announced by e-mail to the address you gave, since telling you is the only thing that address is for.