Privacy note

Last updated 28 September 2026

This note covers the Sleet website and early-access waitlist. We use your email address to confirm your signup and tell you when early access opens.

What we collect and why

Joining the waitlist saves your email address, the time you signed up and a record of your consent. Email confirmation also records when you confirm, when you request a link, and whether our email provider accepted the message. We store a hash of each confirmation token, which expires after 24 hours. We use these details for signup confirmation and one early-access announcement. We don't sell the list or add you to a newsletter. You can withdraw your consent at any time.

Hosting and security services also process technical information, such as IP addresses, browser signals and request information, to deliver the site and prevent abuse. These details are not part of your waitlist entry. We use this processing for our legitimate interest in keeping the site available and protecting it against automated abuse.

If you contact us, we use your email address and message to respond to your request.

Services that handle data

We use service providers for website hosting, security, database storage and receiving support email. They process the information needed to provide those services.

Cloudflare hosts this website and provides Turnstile, the form's bot check. Turnstile processes technical information when you interact with the form. Read Cloudflare's privacy policy for details about its processing. Service providers may process information outside your country.

Cloudflare Email Service sends signup confirmation emails. It processes the recipient address, message content and delivery information, including bounces and spam complaints. We don't enable open or click tracking. We'll update this note before the early-access announcement if its delivery uses a different provider.

Cookies and browser storage

We don't use advertising trackers or site analytics. The site remembers your sound preference in your browser's local storage. Fonts are served from this site. Cloudflare's security services may use browser storage as part of their checks.

How long we keep data

Confirmation requests that remain unconfirmed become eligible for deletion seven days after the last request. A daily cleanup removes them and expired confirmation tokens. We keep confirmed entries, and entries made before email confirmation was introduced, until the early-access announcement has been sent, then delete them. You can ask us to remove your entry sooner. Copies in backups may remain until those backups expire. Hosting and security records follow the relevant service's retention settings.

Your choices and contact

Contact the Sleet project at privacy@sleetbot.com to withdraw consent, request access to your data, correct it or ask for deletion. Where applicable, you can also ask to restrict processing, object to it or request a portable copy of your data. Withdrawing consent does not affect processing that already took place.

Write from the address you used to sign up where possible. We may need to verify that the request is yours before disclosing or changing personal information. We respond within the time limits required by applicable law.

You can complain to your local data protection authority. In the UK, contact the Information Commissioner's Office.

This note covers the website and waitlist. A separate privacy policy will explain the bot's data processing before it becomes available.