← DataTrex

Privacy

What happens when you join the DataTrex waitlist. Last updated 22 September 2026.

DataTrex is pre-launch. The waitlist exists so we can tell you once, when access opens. This page describes everything we collect and everything we do with it.

What we collect

DataWhere it comes fromWhy
Your email addressYou type itTo send you one email when access opens
Signup timeOur serverOrder of the waitlist
How you arrived: the page you landed on; the referring website's name (host only, never the page); campaign tags (utm_* and equivalents); a referral or promo code if the link had one; whether the link carried an advertising click identifier (only that it did, and from which platform, never the identifier itself); whether you navigated, reloaded or came back to the page; roughly when you landed; and, when relevant, which page of ours you came from, the name of any referral parameter or affiliate network, counts of link parameters we discarded, and the names of campaign tags that appeared twice with different valuesRead once by our page's script from the address you arrived at and sent with the form. If scripts don't run, the same campaign tags are read from the address of the page the form was sent fromTo know which channels reach people. Every value here is supplied by your browser or the link you followed, so we treat it as a hint, not a fact
CountryEstimated from your IP address at our host's edgeWhich regions to support first
Your IP addressYour connection to our serverSpotting fake and automated signups, and understanding where signups come from. Deleted after 90 days.
City and regionEstimated from your IP address at our host's edgeWhich regions to support first. Deleted after 90 days.
Network number (ASN) and network operator (e.g. your internet provider, mobile carrier or VPN)The network number comes from our host's edge; the operator's name from public internet-registry (RDAP) records for that numberTelling genuine signups from automated ones. The operator is whoever runs the network you connected through. If you connected from a workplace or university network it may be that organisation, but we never treat it as your employer. Deleted after 90 days.
Browser family and major version, rendering engine, operating system family, device type (mobile / tablet / desktop), whether the screen is touch-capable, and a screen-width band (narrow / medium / wide)Your browser's user-agent, plus two values our page's script sends with the formWhich browsers, devices and screen sizes to build and test for. We do not store the full user-agent string. If your browser sends Global Privacy Control, we discard the two page values when they arrive.
Public facts about your email's domainPublic DNS and domain-registry (RDAP) recordsTo prioritise access for sports-data and trading organisations

The domain lookup, specifically

If you sign up with a work address, we look up public records about the domain — never about you. That means: whether the domain accepts mail, which mail platform it uses, whether it publishes SPF/DMARC records, when the domain was registered, and its registrar. This is the same public information every mail server on the internet can see, and it describes an organisation, not a person.

If you sign up with a personal address (Gmail, Outlook, iCloud and similar), we skip this entirely — those records would describe your email provider, not you, and would tell us nothing.

From the address itself we also note whether it is a shared role address (such as info@), whether it uses a +tag, and whether the domain is a known personal or disposable email provider.

What we never do

Who else sees it

Your email address is stored on Vercel, which hosts this site and acts as our processor. The domain lookups described above query public DNS and the RDAP registry service, and those receive only the domain part of your address — never your full email.

To look up the network operator, we send only your network's number (ASN) — a number shared by everyone connected through that provider — to the public RDAP registry service (rdap.org, which forwards it to the regional internet registry). Your IP address and email address are never sent.

Like any web host, Vercel keeps short-lived request logs that include your IP address and browser user-agent, available to us for up to one day. Vercel may also keep its own security and abuse-prevention records, under its privacy policy. Our site and signup storage run in the United States.

We may also receive a notification email for each signup in our own Microsoft 365 mailbox (Microsoft already hosts our email and acts as our processor). That notification contains your email address, signup time, how you arrived (channel, campaign tags, referring site's name, referral code), country, browser family and version, operating system, device type, screen-width band and the domain facts above. It does not contain your IP address, city, region, network number or operator — those stay only in the stored record, so they can be deleted on schedule. If you ask us to delete your data, we delete the stored record and the notification email (Microsoft keeps deleted mail recoverable for up to 30 days before it is purged). Your data is not sent anywhere else.

This site stores one item in your browser: your light/dark theme choice (dtx-theme), and only if you change it. It is never sent to us.

Legal basis

We rely on your consent to hold your email address and send you the launch email; you gave it by submitting the form, and you can withdraw it at any time. We rely on legitimate interests for the domain lookup and the signup context, because it is limited to business information about an organisation and is what we need to plan a launch. We use it to decide which organisations to invite first; it never leads to a legal or similarly significant decision about you, and everyone on the list still receives the launch email. We also rely on legitimate interests for your IP address and the city, region, network number and network operator derived from it: keeping the waitlist free of fake and automated signups, and understanding where interest comes from. We limit this to 90 days and never use it to identify you. If you would rather we did not, tell us and we will delete the record.

How long we keep it

Your IP address, city, region, network number and network operator: 90 days from signup. An automated job runs daily and removes them from your record within a day of that period ending; the rest of the record stays.

Everything else: until launch plus 12 months, or until you ask us to delete it — whichever comes first. If DataTrex does not launch, we delete the entire waitlist.

Your rights

You can ask us for a copy of what we hold, correct it, delete it, or object to the domain lookup or the IP address processing. Email zacharymills@datatrex.org and we will action it within 30 days. You can also complain to your local data protection authority.

If you are in the EU/EEA or UK: we obtained the domain information from public registry and DNS sources rather than from you, and this page is how we tell you about it. It concerns your organisation's domain, not you as an individual.

Contact

DataTrex is responsible for this data (the controller). Contact: zacharymills@datatrex.org