Your information, how we use it, and your rights.

1. Who we are

This site (cleanslateformen.com) is operated by Clean Slate ("we," "us," or "our"). Clean Slate is a pre-launch consumer hygiene brand. This policy explains what information we collect, how we use it, and the choices you have. If you have questions, write us at privacy@cleanslateformen.com.

2. What we collect

Information you give us

• Email address — when you submit the waitlist form.
• Referral code — if you arrive through a friend's referral link, we record which waitlist member referred you so we can credit them.

Information collected automatically

• Approximate location (country, region, city) — derived from your IP address by Cloudflare when you submit the form.
• Device and browser info — user-agent string, screen size, language.
• Referrer and landing page — the URL that brought you here and the page on our site you landed on.
• Campaign parameters — UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and ad-platform click IDs (gclid, fbclid, ttclid) if present in the URL.
• IP address — used only to rate-limit abusive signups. It is stored for 60 seconds, tied to a counter, and never saved alongside your email.

3. How we use your information

• To send the waitlist email — the one notification we exist to send: when Clean Slate is ready to buy.
• To send occasional launch updates — only if you opted in. Every email has a one-click unsubscribe link.
• To measure which ads and channels work — so we don't waste money showing ads to the wrong people.
• To operate the referral program — crediting the friend who sent you.
• To keep the site secure — detecting abuse, spam, and malicious traffic.

We will never sell your email address. We do not use your information to target ads on third-party sites beyond the analytics and pixel-based measurement described below.

4. Cookies, pixels, and third-party services

We use the following third-party services. Each one has its own privacy policy; where relevant we've linked it. Data sent to them is limited to what they need to do their job.

Your browser may store a small amount of data in sessionStorage (a temporary, per-tab storage) to remember the campaign you came from so we can attribute a signup correctly. This clears when you close the tab. We do not use first-party cookies to identify you. Third-party pixels (Meta, TikTok, Google) use their own cookies if you have not blocked them — you can control these through your browser settings or extensions like uBlock Origin.

5. How long we keep information

• Email and waitlist record — kept until you unsubscribe or request deletion, or until we decide to discontinue the waitlist (whichever comes first).
• IP address (rate-limit counter) — 60 seconds.
• Analytics data — retention is set by the analytics provider (typically 14 months for GA4).

6. Your rights

Wherever you live, you can:

• Access — ask for a copy of the information we hold about you.
• Correct — ask us to fix anything that's wrong.
• Delete — ask us to remove your email and waitlist record. This is immediate and permanent.
• Unsubscribe — every email we send has a one-click unsubscribe link, or just reply "unsubscribe."

If you are in the EU, UK, or another jurisdiction with similar rules (GDPR/UK GDPR), you additionally have the right to object to processing, restrict processing, port your data, and lodge a complaint with your local data-protection authority. Our lawful basis is your consent (which you give by submitting the form) and our legitimate interest in running the waitlist and measuring our marketing.

If you are a California resident, the CCPA/CPRA gives you the right to know what we collect, delete it, correct it, and not be discriminated against for exercising those rights. We do not "sell" or "share" personal information for cross-context behavioral advertising as those terms are defined by California law.

To exercise any of these rights, email privacy@cleanslateformen.com. We'll respond within 30 days.

7. Children

Clean Slate is intended for adults. We do not knowingly collect information from anyone under 16. If you believe a child has submitted their email, contact us and we will delete the record.

8. International transfers

We are based in the United States. Our infrastructure runs on Cloudflare's global network. If you submit information from outside the US, you understand that it may be processed in the US or other countries where our service providers operate. Where required (e.g., transfers from the EU), we rely on Standard Contractual Clauses and equivalent safeguards provided by our vendors.

9. Security

We use HTTPS on every page, rate-limit abusive requests, and limit admin access to the waitlist to a single authenticated endpoint. No system is perfect. If you believe your information has been compromised, email us immediately.

10. Changes to this policy

We'll update this page when our practices change. The "Last updated" date at the top reflects the most recent change. Material changes (new categories of data, new purposes, new third-party services) will be announced by email to waitlist members before taking effect.

11. Contact