Privacy Policy

Who we are

For the purposes of UK GDPR, the data controller for vulpineos.com, auth.vulpineos.com, admin.vulpineos.com, and related services is Flippify Ltd, trading as VulpineOS, a company registered in England and Wales under company number 16548611, with registered office at 61 Bridge Street, Kington, United Kingdom, HR5 3DJ.

We have not appointed a Data Protection Officer because we are not required to under UK GDPR Article 37. The point of contact for data-protection matters is privacy@vulpineos.com.

Data we collect

From the waitlist form

Name, email address, GitHub handle, LinkedIn profile URL, optional Twitter / X handle, the interests you select, and the optional free-text message you submit.

From operator-console accounts

For operator accounts: a username, password hash held by our auth provider, an opaque session cookie, and any data you write while using the console (admin notes, content edits to the public roadmap and changelog).

Automatically

Standard request metadata (IP address, user-agent, timestamp), and — when you have accepted cookies — analytics data via Google Analytics. Server logs are retained for short windows for security and reliability.

From public profiles

We may publicly view the GitHub, LinkedIn, or Twitter / X profiles you provide to confirm context and shipping signal during waitlist review. We do not log in to private surfaces or scrape protected endpoints.

How we use your data

We use the data described above to operate the waitlist (review fit, decide access, contact applicants), to run the operator console, to improve the site and runtime, and to send infrequent updates to people who have opted in.

We will not sell your data, share it with advertisers, or use it to train AI models.

Lawful bases (UK GDPR)

• Consent — for cookies-based analytics and marketing emails. You can withdraw consent at any time.
• Legitimate interests — for waitlist review, security logging, fraud prevention, and product improvement that does not override your rights.
• Contract — for operator-console accounts and any related service we provide to invited users.
• Legal obligation — where we must retain or disclose data to comply with applicable law.

Subprocessors

We use a small number of third parties to operate the service. The current list is published at /legal/subprocessors and is updated when we add or remove a processor.

International transfers

Some of our subprocessors operate outside the UK / EEA. Where transfers occur, we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision in force at the time of transfer. The current location of each processor is listed on the subprocessors page.

Retention

• Waitlist data — until you request deletion, or until 24 months of inactivity.
• Operator-console accounts — for the life of the account, plus 30 days.
• Cookie / analytics data — Google Analytics retention is set to 26 months.
• Server access logs — up to 90 days.
• Email logs — up to 12 months.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Erasure of your data (subject to legal exceptions).
• Restrict or object to certain processing.
• Data portability for the data you provided.
• Withdraw consent at any time, where consent is the lawful basis.
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled.

To exercise any of these rights, email privacy@vulpineos.com.

Cookies

We use cookies for site analytics, gated behind explicit consent. The full cookie policy lives at /legal/cookies, including how to change your decision later.

Agentic emails

We may send personalised emails to waitlist applicants, drafted with the help of information you have provided and information from your public profiles. Drafts are reviewed by a human before sending.

Children

The service is not intended for children under 13 and we do not knowingly collect data about them.

Changes

Updated versions of this policy are posted with a new "last updated" date at the top of the page. Material changes will be flagged on the homepage and, where appropriate, notified by email.

Contact

Privacy queries: privacy@vulpineos.com. Other queries: support@vulpineos.com.