Privacy Policy
Last updated: June 2025
Who we are
Told is a place recommendation app that lets you discover and share the spots your friends actually love. This website is the pre-launch home for Told and handles waitlist sign-ups and shared recommendation links. References to “we”, “us”, or “Told” in this policy refer to the Told app and this website.
What we collect and why
Waitlist email address
When you join the waitlist we collect your email address and the time you signed up. We use this solely to notify you when Told launches. We will not send you marketing emails or share your address with third parties. You can ask us to remove you at any time by emailing us at the address below.
IP address (rate limiting)
When you submit the waitlist form, your IP address is temporarily used to prevent abuse. This is processed by Upstash (a Redis provider) and is not stored permanently or linked to your email address.
Shared recommendation links
If you visit a shared recommendation link (e.g. told-app.com/s/…), we display the place name and the name of the person who shared it. No personal data about you as a visitor is collected or stored when you view these links.
Cookies and consent
We use Cookiebot to manage cookie consent. Only strictly necessary cookies are loaded before you give consent. You can review or change your cookie preferences at any time using the cookie settings link in the footer.
Third-party services
We use the following third-party services to operate this website:
- Supabase — Stores waitlist email addresses. Hosted in the EU.
- Google reCAPTCHA Enterprise — Bot and spam protection on the waitlist form. Processes your interaction with the form and assigns a risk score. Subject to Google's Privacy Policy.
- Upstash — Rate limiting via Redis. Temporarily processes IP addresses to prevent abuse.
- Cookiebot — Cookie consent management.
- Netlify — Hosts this website. Netlify may log standard server access data (IP address, browser, pages visited) for operational purposes.
Legal basis for processing
We process your email address on the basis of your consent, given when you submit the waitlist form. You can withdraw that consent at any time by contacting us. IP addresses used for rate limiting are processed on the basis of our legitimate interest in preventing abuse of the service.
How long we keep your data
We keep waitlist email addresses until Told launches or until you ask us to remove yours, whichever comes first. Rate-limiting data expires automatically after 60 minutes.
Your rights
You have the right to access, correct, or delete the personal data we hold about you. You also have the right to withdraw consent at any time, to object to processing, and (where applicable) to data portability.
To exercise any of these rights, email us at privacy@told-app.com. We will respond within 30 days. If you are in the EU or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
Changes to this policy
If we make material changes to this policy we will update the date at the top of this page. For significant changes that affect how we use your data, we will notify you by email if we hold your address.
Contact
Questions or requests: privacy@told-app.com