Privacy Policy
Last updated 21 September 2026
This policy covers the TRNCH waitlist page only. It does not cover the TRNCH product, which is not released. When the product launches it will carry its own policy describing accounts, payments and everything you do inside the tool. Nothing described there happens on this page.
On this page
1. Who we are 2. What we collect 3. Why, and the legal basis 4. Who else sees it 5. How long we keep it 6. Your rights 7. Cookies and tracking 8. Where your data goes 9. Children 10. Changes 11. Contact1. Who we are
TRNCH is a product research tool for people selling on TikTok Shop. It has not launched. This page collects email addresses so we can tell those people when it does.
“We” and “us” mean the operator of TRNCH. For anyone in the EU or the UK, the operator is the controller of the personal data described here.
2. What we collect
From this page, one thing you type and three things the request carries.
| What | How we get it |
|---|---|
| Your email address | You type it into the waitlist form. |
| The time you submitted it | Recorded by our server. |
| Your IP address | Sent by your browser with the request. We keep it as proof of when and from where consent was given, which is what a regulator asks for. |
| Which wording of the page you saw | The page has several copy variants; we record which one was on screen, for the same reason. |
| Your referral code, and who referred you | Generated by us. If you arrived through someone’s link we record whose, so we can honour their reward. |
If you use “Continue with Google”, Google tells us your email address and whether Google has verified it. That is all we ask for and all we keep — not your name, not your picture, not your contacts. Google will know you signed in to us; their handling is covered by Google’s privacy policy.
That is the whole list. No name, no company, no phone number, no payment details. We do not buy or import addresses from anywhere else.
3. Why, and the legal basis
To send you one email, when TRNCH launches, with the discount you were offered for joining early. Nothing else. No newsletter, no drip sequence, no “while we have you”.
Under the UK and EU GDPR our basis is your consent (Article 6(1)(a)), given by typing your address and pressing the button under a line that says exactly what we will send. Consent is not bundled with anything else and there is no pre-ticked box on this page. You can withdraw it at any time — see your rights — and withdrawing is as easy as giving it.
Under US law this is a commercial message, so the launch email will carry a working unsubscribe link, our postal address, and an honest subject line, as CAN-SPAM requires.
4. Who else sees it
We do not sell your address, rent it, or share it for anyone else’s marketing. We do not run advertising on this page and there is no data broker in this picture.
The only parties who touch it are the ones needed to store it and send the email:
- Cloudflare — serves this page. It sees the request, not your address.
- Supabase — stores the list and runs the sign-up. Hosted in the United States.
- Resend — sends the two emails described above.
- Google — only if you choose “Continue with Google”.
Each is engaged as a processor under a data processing agreement and may only act on our instructions.
5. How long we keep it
- Until launch, plus 30 days. After the launch email has gone out and that window has closed, the list is deleted.
- If TRNCH does not launch within 24 months of you joining, the list is deleted then.
- If you ask us to delete it, we delete it and keep only the fact that the address asked to be removed, so we do not mail it again by accident.
6. Your rights
Wherever you live, you can email us and we will do these things free of charge, within 30 days:
- See what we hold about you.
- Correct it.
- Delete it — and be taken off the list.
- Withdraw consent, which has the same effect.
- Take it with you in a machine-readable file.
- Object to what we are doing with it.
California residents: we do not sell or share personal information as the CCPA/CPRA define those terms, and we do not process it for cross-context behavioural advertising. You have the rights above and we will not discriminate against you for using them.
EU and UK: if you think we have handled your data badly you can complain to your national supervisory authority. We would rather you told us first.
7. Cookies and tracking
This page sets no cookies. There is no analytics, no advertising pixel, no session cookie, and no third-party script of any kind. Fonts are served from our own domain rather than a font CDN, so no third party is told that you visited.
The page stores two keys in your browser’s local storage: which copy variant you were shown, and — if you have joined — your own referral code, so the page can show you your progress when you come back. Neither is a cookie and neither is sent to anyone else.
“Continue with Google” sends you to Google and back. That round trip is the only time this site hands you to a third party, it only happens if you press the button, and it is how sign-in works everywhere. Nothing on the page tracks you before or after it.
8. Where your data goes
Our hosting and email providers may process data in the United States. Where personal data leaves the UK or EEA, transfers are made under the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or to a provider certified under the EU–US Data Privacy Framework.
9. Children
TRNCH is a business tool and is not directed at children. We do not knowingly collect anything from anyone under 16. If you believe a child has given us an address, tell us and we will delete it.
10. Changes
If we change this policy we will change the date at the top. If a change materially affects what we do with an address we already hold, we will email the people on the list before it takes effect.
11. Contact
Email hello@trnch.net for anything in this policy, including deletion requests. We answer within 30 days.
Postal address: to be published before launch.