Privacy Policy

Version 1, effective 25 October 2026

Enchantd is operated by Pär Nilsson, Bangårdsgatan 19, 411 12 Göteborg, Sweden, who is the controller of the personal data described here. For privacy questions or requests, contact hello@enchantd.app.

Summary

• Today this website does two things with personal data: it keeps the email address you give us on the waitlist, so we can tell you when Enchantd opens and send your launch discount, and, only if you accept analytics, it measures how visitors use the site.
• We email you only because you asked us to, and every email has an unsubscribe link.
• We do not sell personal data, use it for advertising, or run advertising cookies on this website.
• Enchantd is for adults. The waitlist is only for people who are 18 or older.

What we process and why

• The waitlist. When you save your place, we store your email address, that you confirmed being 18 or older and agreed to receive our emails, the version of the wording you agreed to, and when you signed up. We use it to email you when Enchantd opens, including your launch discount code, and about new adventures. The legal basis is your consent, which you can withdraw at any time by unsubscribing or emailing us; withdrawing does not affect emails already sent. Our email provider, Loops, records whether you open our emails and click their links so we can see whether they reach people.
• Analytics. If you accept analytics in the cookie banner, Amplitude records the pages you visit, whether you open the book and turn its pages, whether you join the waitlist, the link or campaign that brought you here, and a random device ID. Amplitude also receives your IP address and browser details, and derives an approximate location from them. We use this to learn which stories and posts bring readers in. The legal basis is your consent, which you can withdraw at any time with Cookie settings at the bottom of every page.
• Your cookie choice. When you accept or reject analytics, we record your choice, when you made it, the policy it applied to, your IP address, browser and language, as proof of what you agreed to. The legal basis is our legal obligation to be able to show consent. The record is stored in our own database in the EU.
• Abuse protection. To stop automated signups, our API counts signup attempts per IP address for one minute. The count is not stored with your email address or kept after that minute. We rely on our legitimate interest in protecting the waitlist from abuse.
• Service and security data. Vercel and Cloudflare process requests to deliver the website and the API, keep them available, and protect them. This involves IP addresses, browser and device information, and operational logs that these providers keep for a limited period. We rely on our legitimate interest in operating a secure service.

Enchantd does not make decisions about you with legal or similarly significant effects based solely on automated processing. If you are under 18, do not join the waitlist; if we learn that someone under 18 has signed up, we delete their address.

Service providers and locations

We use these providers, who process personal data on our behalf under data-processing terms:

• Loops (Astrodon Corporation) for the waitlist and our emails, in the United States
• Amplitude (Amplitude, Inc.) for analytics, stored in its EU data center
• Neon for the database that holds cookie choices, in the EU
• Cloudflare for the API, domain name and security
• Vercel for website hosting

Loops processes the waitlist in the United States, and Amplitude, Cloudflare and Vercel may access data from there too, for example for support and security. Where required, these transfers rely on an adequacy decision, such as the EU-US Data Privacy Framework for certified providers, or on the European Commission's standard contractual clauses. Contact us for information about the safeguards relevant to your data.

How long we keep data

We keep your waitlist address until you unsubscribe or ask us to delete it. If you unsubscribe, we keep your address marked as unsubscribed, so that we never email you again, unless you ask us to delete it completely. We delete the waitlist if Enchantd does not launch. We keep analytics data for as long as it helps us improve Enchantd, and cookie choice records for as long as we need to show what you agreed to. Provider logs are kept within each provider's configured retention period.

Your rights

You may request access to, correction or deletion of your personal data, restrict or object to its processing, and receive it in a portable format. Contact hello@enchantd.app; we respond within one month. You may also complain to the Swedish Authority for Privacy Protection (IMY).

Changes

When Enchantd opens, we will add what the app itself does, such as accounts, stories and payments, before it does it. We will update this policy whenever our data practices change and give it a new version and date.