Privacy

Last updated 23 October 2026

The short version

Kumonote isn't open yet. If you join the waitlist, we keep your email address so we can tell you when it opens. We don't sell it, share it for marketing or track you around the web. You can leave whenever you like.

What we collect

  • Your email address.
  • What you said you'd use Kumonote for, if you picked anything.
  • How you found us (the referring site or campaign tag), and your browser's language.
  • When you signed up, confirmed, or left the list.

We also see your IP address when you sign up, to stop repeated sign-ups from one connection. It's kept in memory for up to an hour and never written to our database.

The site has no analytics, no advertising and no tracking cookies. The bot check described below runs quietly in the background and only asks you to tick a box if something looks unusual.

Why

To confirm the address is yours, and then to send you one note when Kumonote opens and you can sign in. We use what you'd use it for, and how you found us, to decide what to build first and where to talk about it. We rely on your consent, which you give by confirming your email.

Who handles it

  • Hetzner hosts the site and the database our list lives in, on servers in the EU.
  • Cloudflare delivers the site and checks the sign-up form for bots (Turnstile). To do that it sees your IP address and some details about your browser and device. It doesn't use them to build an advertising profile.
  • Resend delivers our emails. It sees your address and the email we send, and nothing else.

How long we keep it

If you don't confirm your email within 30 days, we delete it. Once you've confirmed, we keep it until you leave the list or until we've invited you and you've had a chance to sign up.

How to leave the list

Every email we send has an unsubscribe link. One click and you're off the list. You can also write to [email protected] to see what we hold about you, correct it, or have it deleted entirely. If you're unhappy with how we've handled your data, you can complain to your local data protection authority.