Who we are
CodeYaz is a software company registered in the Netherlands: Eemstraat 38, 5704MR Helmond, Netherlands, KVK 42023276, BTW NL005436725B34. CodeYaz is the controller of the personal data described on this page. You can reach us at [email protected].
This page covers codeyaz.com and the products in development that open here: RivalFiled, Fortholder and IfYouToo. SokkerHub and DueYear run on their own sites, sokkerhub.com and dueyear.com, and each has its own privacy page.
Visiting this site
This site sets no cookies and has no advertising. Apart from the IfYouToo page, described below, it stores nothing in your browser and has no analytics or tracking scripts. Its fonts are served from this site, not from another company’s servers. The guides and templates need no sign-up: a template downloads directly, without asking for your email.
The site is hosted by Vercel, a US company, and served from Vercel’s network of servers around the world, usually from one close to you. Like any web server, Vercel receives your IP address, your browser’s user agent and the pages you request. The request logs we can see in our Vercel account are kept for 30 days at most. Vercel also uses this traffic information for its own purposes under its own privacy policy.
On /products/ifyoutoo only, we count visits with Vercel Web Analytics. It sets no cookies and does not store your IP address. For each page view it records the time, the page address (with any share code or campaign labels in it), the site you came from, your country, region and city as derived from your connection, and your browser, operating system and device type. To tell visitors apart it uses a hash of the request that is discarded after 24 hours. On that page it also counts arriving through a share link, joining the waitlist, which kind of person you chose in the optional question, and pressing Share or Copy link, never your email. We see these only as totals. That page also keeps your random share code in your browser and, if the age check said under 18, that result, so the form stays closed on that device; the campaign labels of your visit are kept for the browser tab only.
The waitlist and reservation forms
Each form stores only what it asks for:
- Waitlist (RivalFiled): your email, your company if you give it, your team size and how you watch patents today.
- Reservation (Fortholder): your email, the plan you pick, who would receive it and what worries you most.
- Waitlist (IfYouToo): your email; that you are 18 or older (you enter your birth month and year, but they are checked in your browser and never sent) and in the US; who you would leave a sealed message for, if you answer that optional question; your own random share code; and, if you came through a shared or campaign link, its code and campaign labels.
With each entry we also store which site, product and form it came from, whether you pressed “Reserve this price” or “Just email me” on the Fortholder form, when the entry was made and last changed, and an ID we give the entry, which holds nothing about you. If you send the same form again with the same email, your entry is updated, not repeated.
We don’t store your IP address or write it to our logs, and we don’t store details about your browser or the page you came from. To limit abuse of the forms, a one-way hash of your IP address is held in memory for 10 minutes; it is not written to disk.
The entries are kept in our own database. The waitlist is not kept with a mailing-list company.
How we use it
We use your email to write to you when the product is ready; if you reserved a price, that email tells you how to buy the product at the price you reserved. We don’t email you before then: sending a form sends you no email. Your answers to the other questions tell us what to build first and whether a product is wanted enough to build.
When a new entry arrives, we get one notice email about it: the product, the form and your answers, including your company if you gave it. The notice does not include your email. It goes to our own mailbox and nowhere else.
Payments
codeyaz.com takes no payments and never asks for card or payment details. A reservation only records that you want the product at the price you reserved; it costs nothing and commits you to nothing. When a product is ready, it is sold on its own site, which has its own privacy page. Nothing from this site goes to a payment provider.
Service providers
The form service and its database run on servers we rent from Hetzner in Nuremberg, Germany.
When you send a form, it goes first to this site’s own server at Vercel. Vercel processes the form’s contents and your IP address only to pass them on to our form service; the code we run there keeps neither. Your IP address is passed on so that the service can limit abuse per visitor. Like any visit, the request also appears in the Vercel request logs described above.
From Vercel, the form reaches the service through Cloudflare, which sits in front of our server. Cloudflare processes your IP address and what you send, including the form’s contents, to deliver it and to block abuse, and keeps its own logs.
The notice email is sent by Resend, from Ireland, and arrives in our mailbox at Zoho Mail, in Zoho’s EU data centre. Resend and Zoho receive only the notice’s content: the product, the form and your answers, not your email. Resend keeps sent emails for 30 days.
The site itself is hosted by Vercel, as described above.
Transfers outside the EU
Vercel, Cloudflare and Resend are US companies, and your data can reach them in the United States. Each of them is certified under the EU-U.S. Data Privacy Framework, and each one’s data processing agreement also includes the European Commission’s standard contractual clauses. Zoho keeps our mailbox in the EU; Zoho group companies outside the EU that may access it do so under the Commission’s model contractual clauses. Hetzner is in Germany.
Legal basis
We store a waitlist entry, a reservation or a “Just email me” entry on the basis of your consent (Art. 6(1)(a) GDPR). You give it by sending the form and can withdraw it at any time by writing to us; we then delete the entry. We limit abuse of the forms, and keep the short request logs described above, on the basis of our legitimate interest in keeping the site and the forms working and safe (Art. 6(1)(f) GDPR).
How long we keep it
We delete the entries for a product once we have written to you that it is open. If we decide not to build a product, we delete its entries when we decide. Apart from IfYouToo, we keep no entry longer than 12 months in any case. IfYouToo waitlist entries are deleted 12 months after IfYouToo opens, or sooner when you ask. The notice emails in our mailbox do not include your email.
You can have your entries deleted sooner at any time by writing to us.
Your rights
Under the GDPR you have the right to access, rectify and erase your data, to restrict how we use it, to object to it, to take a copy of it (portability) and to withdraw your consent at any time. Write to [email protected], from the address you used, and we will answer within one month; a deletion request removes every entry for that address. You also have the right to complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens.
Changes to this page
When what we collect, or who handles it, changes, this page changes with it, and the date at the top changes too.
Contact
CodeYaz, Eemstraat 38, 5704MR Helmond, Netherlands — [email protected].