Clear about your data.

Who is responsible

Ambra is an independent beta project based in the United Kingdom and is the data controller for the waitlist information described here. Questions and privacy requests can be sent to ambra.support@protonmail.com.

Information we collect

• The email address you enter.
• Consent details, including the notice version, form location, and date and time of signup.
• A keyed HMAC-SHA256 fingerprint derived from your IP address, together with the attempt time, for abuse prevention.

Ambra's application code does not save your raw IP address in its waitlist database. The server receives it long enough to create the one-way keyed fingerprint. Infrastructure providers may separately process ordinary connection logs to operate and secure their services.

Why we use it

Providing an email address is optional. If you do not provide one, you will not join the waitlist. We do not use waitlist data for solely automated decisions that have legal or similarly significant effects.

Storage and retention

• Waitlist emails and consent records are kept while the Ambra waitlist and early-access programme remain active. They are reviewed at least annually and deleted or anonymised within 90 days after that programme ends, unless you ask us to delete them sooner or a legal obligation requires longer retention.
• IP fingerprints are used for a 24-hour abuse-prevention window. Once older than 24 hours, they are deleted when the next valid signup attempt triggers database cleanup. If there are no new attempts, deletion may therefore occur later.

Waitlist records are stored in Supabase. Access is restricted to authorised server-side operations and is not available through the public or signed-in client roles.

Who receives the information

We use service providers acting on our instructions to operate the website and database, including Supabase for waitlist storage, Vercel for Web Analytics when enabled on our hosting, and the provider that hosts this website when it is deployed. We may also disclose information where required by law or to establish, exercise, or defend legal claims.

We do not sell waitlist information. If a provider processes information outside the UK, we will rely on an applicable legal transfer mechanism and appropriate safeguards.

Your choices and rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict, or receive your personal information, and to object to certain uses.

We may need to verify your identity before acting on a request. Withdrawing consent does not affect processing that was lawful before withdrawal.

Cookies and analytics

This website includes Vercel Web Analytics. When enabled on our hosting, it collects page-visit statistics, including the page path, referrer, visit time, approximate location and browser or device information. Vercel uses a short-lived request-derived hash rather than analytics cookies; its visitor identifier is discarded after 24 hours. We use these statistics to understand visits and improve the website. We do not send waitlist email addresses or form contents as analytics events, and we remove query strings and fragments from page-view URLs. We do not use advertising cookies.

Questions and complaints

Please contact us first at ambra.support@protonmail.comso we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office.

Changes to this notice

We will update this page when our processing changes. If a change materially affects how we use existing waitlist data, we will bring it to your attention before the new use begins where required.