Privacy policy

Your email address is required. Name and pack interest are optional. We also record your confirmation that you are 18 or older, your consent wording and version, the signup time, registration status and expiry date, and the page where you signed up. We don’t ask for your date of birth, phone number or health information.

Only after you confirm your age and give consent, we store these details to maintain the miss.behave waitlist and contact you with launch updates. Optional pack interest helps us understand interest in the planned bundles. Consent does not include wider marketing. This phase saves entries only; no emails are sent.

The website sends your consented registration through its server to Heresé’s Supabase project in Mumbai, India. Authorized Heresé operators can manage the records privately. Visitors cannot browse or edit subscriber records. We don’t store signup details in browser storage or editor files.

Registrations expire 12 months after the original signup. A daily cleanup deletes expired records. Duplicate signups do not extend that period. Supabase’s managed backup retention may temporarily retain prior copies after deletion; these are restricted to recovery purposes.

Joining is optional. You can withdraw consent or request deletion earlier by emailing founder@ecorality.com from your signup email address. We verify that mailbox before changing records. Withdrawn registrations remain inactive; repeat submissions do not silently reactivate them.

Feedback is optional and separate from joining the waitlist. We ask for your message and agreement to store it; no name, email, account or sign-in is required. Please avoid sharing personal or medical details.

We store the message, a random reference, submission time, twelve-month expiry, review status, and the consent wording and version in the Heresé Supabase project in Mumbai. Feedback records contain no IP address, browser information, analytics identifier or waitlist-registration link. Authorized Heresé operators can review feedback privately; visitors cannot browse or change responses. We use feedback to improve miss.behave and this website. It does not subscribe you to launch updates.

Feedback expires twelve months after submission and a daily cleanup deletes expired messages. Restricted managed backups may temporarily retain earlier copies for recovery. We do not save feedback in browser storage, send it to Google Analytics, or deliberately log message text in application logs. Hosting and database providers still process ordinary technical request information to deliver and protect the service, so this is not a promise of complete anonymity.

Submitting feedback requires its own initially unchecked storage agreement, separate from waitlist and analytics choices. To request removal, contact founder@ecorality.com with enough information to locate the message, such as its wording and approximate date. Without a name or account attached, we may not be able to identify a response reliably.

Google Analytics is optional. We use Basic Consent Mode v2: the Google tag does not load or send analytics requests before you choose Accept analytics. Choosing Reject analytics leaves it off. Only analytics storage is enabled after acceptance; advertising storage, advertising user data and ad personalization remain denied.

If you accept, Google Analytics can store first-party cookies such as _ga to measure visits across pages. Your analytics permission and these cookies last up to 180 days without automatically extending that period. We save only your analytics choice, its version and time in browser storage. A rejection is remembered until you explicitly change it. Earlier saved refusals are respected, and browser Do Not Track or Global Privacy Control signals keep analytics off. If your choice cannot be read or saved, analytics stays off.

Our events describe a page visit or a successful waitlist-request acknowledgement. We send fixed page labels and canonical page addresses without query strings, fragments or referrers. We do not send your email, name, pack interest, form contents or health information. An acknowledgement can include a repeat request; it is not a count of new subscribers. Automatic form, search, video, scrolling, download and history measurements, Google Signals and advertising personalization are off.

With your permission, Google receives measurement data and ordinary technical information such as browser/device information, request time and IP information and may process information outside India. Google says Analytics uses IP information at collection and then discards it before logging. Analytics cookies and technical data can distinguish visits; this is not an anonymous signup service.

You can change or withdraw your choice through Analytics settings in the footer. Rejecting after acceptance stops future site events, removes accessible Analytics cookies and refreshes the page to unload the tag. It cannot recall requests already sent or delete information already held by Google. Analytics permission is separate from your explicit consent to join the waitlist; the website and waitlist work without analytics.

For privacy questions, contact founder@ecorality.com. See Google’s privacy policy and how Google uses information from sites using its services.

The waitlist and feedback forms do not save submitted details in browser storage or use advertising analytics. Research links open third-party websites with their own privacy practices.

Cloudflare hosts this website and processes ordinary technical request information to deliver and protect it. We use temporary, pseudonymous security counters to limit repeated form attempts. These counters contain no signup details, feedback contents or raw IP address. They expire after ten minutes and are removed as further form requests arrive.

We use Cloudflare Turnstile when you use a protected waitlist or feedback form. Cloudflare processes technical browser and device signals, including IP information, to distinguish legitimate visitors from automated abuse. This verification is necessary to protect the forms and is separate from optional analytics or launch-update consent.

Our server sends the verification token to Cloudflare and checks its result before accepting your submission. We do not include your name, email, pack choice, feedback message or health details in that verification request. Verification tokens are short-lived and are not saved with your registration or feedback, in browser storage, or in our application logs.

Cloudflare may process technical verification information outside India. The Mumbai location described above refers to our waitlist and feedback database; it is not a promise that all hosting, analytics or security processing takes place in India. See Cloudflare’s Turnstile Privacy Addendum.

If a security check expires or cannot complete, your form entries remain available so you can retry. You can also contact our privacy inbox for help.

For questions about this notice, feedback or your waitlist registration, contact founder@ecorality.com.