Privacy Notice

Draft: this text still has to be completed and checked before publication. Items in [brackets] are placeholders.

Version 0.1, last updated 2026-10-24

Who is responsible

The controller is Jody Ingelaere, a natural person in Belgium, who is preparing the launch of Skelvo ("we"). Skelvo is not yet a registered company; business details will be added once it is.

Contact: hello@skelvo.app. Privacy contact: privacy@skelvo.app.

This notice covers this website and the waitlist before the launch of Skelvo. When Skelvo goes on sale, a full Privacy Notice will also cover the app, licenses and purchases.

Summary

This website sets no cookies and uses no trackers or advertising.

Visitor statistics come from Cloudflare Web Analytics, which works without cookies and without identifying you.

If you join the waitlist we store your email address, language and user group. Your sign-up is complete once you have answered a short questionnaire via the link in our email (double opt-in); only then do we email you about Skelvo.

IP addresses are only used, in hashed form, to limit abuse of the sign-up form and are deleted automatically within about 2 hours.

We do not sell your data and do not use it for advertising or profiling.

Visiting the website

Data: when you visit the website, your browser sends technical data (such as IP address, browser type and the requested page) to our hosting provider Cloudflare, which needs them to deliver the page and to protect it against attacks. Cloudflare Web Analytics gives us only aggregated figures, such as the number of visits per page and per country.

Purpose and legal basis: delivering and securing the website and understanding in aggregated form how it is used; our legitimate interest (article 6(1)(f) GDPR).

Retention: we do not keep server logs ourselves; Cloudflare's processing is described in its documentation [verify retention]. Aggregated statistics contain no personal data.

The waitlist

Data: email address, preferred language, the user group you choose (3D printing, architecture, interior design, furniture and kitchen making, 3D modeling or hobby), the date, time and text version of your consent, the date and time you completed your sign-up, the page you signed up on, and, if present, the campaign tags in the link you followed (utm_source, utm_medium, utm_campaign) and the domain of the website that referred you.

Purposes: informing you about the launch of Skelvo and sending occasional news about Skelvo in your language and tailored to your user group; measuring, in aggregated form, which user groups, countries, languages and channels are interested.

Legal basis: your consent (article 6(1)(a) GDPR), confirmed by double opt-in. You can withdraw it at any time via the link in every email, via the delete-my-data page or by writing to privacy@skelvo.app. This does not affect the lawfulness of the processing before withdrawal.

Retention: until you unsubscribe, and at the latest 24 months after the launch of Skelvo unless you renew your consent. Sign-ups that are not completed are deleted after 30 days. When you unsubscribe, we delete your sign-up and your answers; we only keep an anonymous count (date, language and user group, without your email address).

The sign-up questionnaire

Data: your answers to the questionnaire that completes your sign-up: your role, how you work (on your own or the size of your company or school), whether you would use Skelvo for paid work, your country, what you want to make, what you use today (in your own words), what bothers you and what matters to you, how often you would use Skelvo, which computers you use, how you prefer to pay, four questions about price, where you heard about Skelvo, whether you would like to join a closed beta and how much time you could give, and an optional comment.

Purpose: product and market research: deciding what to build first, for which systems and languages, and at what price. We analyze the answers in aggregated form. If you would like to join the closed beta, we may email you about it.

Legal basis: your consent (article 6(1)(a) GDPR), given when you send the questionnaire. Answering is needed to complete the sign-up; if you do not want to answer, simply do not complete it and it is deleted after 30 days.

Retention: the answers are deleted together with your sign-up (see above).

Protection against abuse

To prevent automated sign-ups and overload, we count requests per IP address. We never store the IP address itself: it is replaced by a keyed hash, and those counters are deleted automatically within about 2 hours. To stop anyone from flooding an inbox, we also count the emails we send per address, again only as a keyed hash; those counters are deleted within 2 days. Legal basis: our legitimate interest in a secure and available service (article 6(1)(f) GDPR).

The sign-up form and the page to delete your data use Cloudflare Turnstile to tell people and automated scripts apart. Turnstile runs a short check in your browser (technical data such as your IP address, browser and device characteristics) without tracking cookies and, in most cases, without a puzzle. Cloudflare only tells us whether the check passed. Legal basis: our legitimate interest in protecting the waitlist and the inboxes of others against abuse (article 6(1)(f) GDPR).

Recipients

Cloudflare, Inc. (processor): hosting of the website and the database, security (including Turnstile) and cookieless Web Analytics. United States; data may be processed in Cloudflare's global network [verify configured data location].

[Resend, legal entity: verify] (processor): sending the confirmation and waitlist emails. United States [verify].

Authorities and courts, only where we are legally required to share data.

We have data processing agreements with our processors (article 28 GDPR). Transfers to the United States are based on the EU-U.S. Data Privacy Framework insofar as the recipient is certified under it, and on the European Commission's standard contractual clauses in the processor's data processing agreement [verify both]. You can request a copy of these safeguards at privacy@skelvo.app.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability and to withdraw your consent at any time. Write to privacy@skelvo.app; we may ask you to confirm that the email address is yours. We answer within one month.

You can also lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be [verify contact details], or with the supervisory authority where you live or work.

Children

The waitlist is not directed at children. You must be at least 16 years old to sign up.

Security

All connections use TLS. Links in our emails contain random or signed codes; the database stores only hashes of confirmation codes, and no IP addresses. Access to the systems is limited to the controller and protected by strong authentication [and two-factor authentication: verify].

Changes

We may update this notice, for example when Skelvo goes on sale or when we change service providers. The current version is always on this page. In case of significant changes we will inform waitlist members by email.