Privacy and your data
Last updated 25 July 2026.
This website collects one thing: the email address you type into the notify box, and only if you tick the consent box. It is used for a single message telling you Draupnir has opened, and then it is deleted. It is never sold, never shared, and never used for anything else.
There are no cookies on this site at all, and no advertising or cross-site tracking of any kind. Visits are measured with counters that record no information about individual people, which is why you were not asked to accept anything.
Who is responsible
Draupnir is an independent software project run by one person in Iceland, who is the data controller for everything described here. The contact address for anything on this page, including a request to delete your data, is privacy@getdraupnir.com.
The email address you give us
| What is stored | Your email address, the fact that you ticked the consent box, the date and time you submitted it, and, if the link you arrived from carried one, a short label saying where the form was shown. Nothing else. No name, no IP address, no device information. |
|---|---|
| Why | To send you one message when signups open. |
| Legal basis | Your consent, under Article 6(1)(a) of the GDPR. That is what the tick box is for, and the form refuses to submit without it. |
| How long | Until the notification message has been sent, plus at most 30 days, after which the address is deleted. Sooner if you ask, or if the project is abandoned before it opens. |
| Who else sees it | Nobody. It is not sold, rented, shared, or passed to any advertising, marketing or analytics company. The only third party involved is the hosting provider described below, which stores it on our behalf. |
How visits are measured
Two things measure this site, and neither one can identify you.
Counters kept by this site. When a page is served, a number goes up. What is stored is the date, which page, which country the request came from, and which website linked here, if any. That is the entire record. There is no row per visit, no IP address, no browser fingerprint, no cookie and no visitor identifier, so there is nothing that could be traced back to a person even in principle. That is why this is not personal data and why no consent was requested for it.
Cloudflare Web Analytics. This measures how quickly pages load for real visitors. It sets no cookies, does not fingerprint devices, and does not track anyone across other websites.
Deliberately not used: Google Analytics, advertising pixels, session recording, heatmaps, and any tool that would follow you to another site.
Where the data is held
This site runs on Cloudflare, which acts as a processor and holds the data strictly on instruction under its data processing terms. The database is currently held in Western Europe. Cloudflare is a United States company, and where any transfer outside the European Economic Area occurs it takes place under the European Commission's Standard Contractual Clauses.
The application itself
Draupnir the application is a separate thing from this website. It is not open to the public, and nobody can create an account in it. This notice covers only this website and the address you may have given it.
When the application does open, it will have its own notice covering what it stores and why, published before it accepts anyone rather than afterwards.
Your rights
Under the GDPR and Icelandic data protection law you can ask, at any time, to:
- see what is held about you;
- have it corrected;
- have it deleted;
- have its use restricted, or object to its use;
- receive a copy in a portable form;
- withdraw your consent, which you may do at any moment and which is as easy to do as it was to give.
Write to privacy@getdraupnir.com and it will be handled without delay and in any case within one month. There is nothing to prove and no form to fill in; asking is enough.
If you are unhappy with how a request was handled, you can complain to the Icelandic Data Protection Authority, Persónuvernd, at personuvernd.is.
Changes to this notice
If this notice changes in a way that affects what is collected or why, the date at the top changes and anyone already on the waitlist is told before the change takes effect. It will not be changed quietly.