Privacy

Last updated: 31 July 2026.

Dan Peguine, at REQUIRED BEFORE DEPLOYMENT, is the controller for the Message Box website. You can reach me at danpeg@gmail.com. I use personal information only for the purposes below. I do not sell it or share it for somebody else’s advertising.

What I collect and why

Your email address, selected interest, signup and confirmation times, consent record and email delivery status are stored to operate the mailing list. The legal basis for sending Message Box progress, beta and build updates is your consent. Confirmation is required before a new subscription becomes active.

If you volunteer for product beta testing, I also store the number and ages of your children, your country, an optional social media profile link and your description of why the product appeals to your family. I review those voluntary answers to understand families’ needs and choose suitable beta testers or design partners. This is based on my legitimate interest in organizing a relevant product beta. You may object at any time. No child creates an account or submits information directly, and I do not ask for children’s names.

If you use the contact form, I receive your email address and message to reply, based on my legitimate interest in responding to enquiries. If you pay a reservation deposit, Stripe handles your payment details; I receive transaction and contact details needed to perform the deposit contract, issue the legally required accounting document, process a refund and meet tax or accounting obligations. Joining the list, answering the beta questions and using the contact form are optional.

Analytics and device storage

Visitor counting is optional and off until you choose Allow. Two first-party cookies remember your choice and a random browser identifier for up to 90 days. We store only a SHA-256 hash of that identifier, a date/time and a broad source category such as Instagram or GitHub. We do not store IP addresses, full referring URLs, browsing histories or fingerprints in this visit table. The purpose is to count consenting browsers once across seven days and understand referral trends; this is not a count of all people. The legal basis is your consent. Choose Visitor counting in the homepage footer, then No thanks, to withdraw consent and remove the identifier. Existing visit records expire after 90 days; non-identifying aggregate totals may be retained for 12 months. Global Privacy Control and Do Not Track disable this optional counting.

Cloudflare Turnstile is loaded on the forms to prevent abuse and may use strictly necessary browser storage. Stripe is loaded only after you open the deposit flow and confirm that you have read the deposit terms. The X post is displayed as ordinary page text and a link; no X widget is loaded.

Your choices

You can withdraw mailing-list consent using the unsubscribe link in an update or by emailing me. Withdrawing consent does not affect processing that was lawful before withdrawal.

Recipients and international transfers

Cloudflare hosts the website and database and provides Turnstile abuse protection. Resend delivers contact messages, confirmation emails and requested updates and reports delivery, bounce, complaint and unsubscribe events. Stripe processes reservation payments and refunds. These providers act under data-protection terms and may process data outside the European Economic Area. Where an adequacy decision does not apply, transfers rely on the European Commission’s Standard Contractual Clauses and any supplementary safeguards described in the provider’s data-protection terms. You may request information or a copy of the relevant safeguards by emailing me.

How long it is kept

Subscriber information is kept while you want Message Box updates. An unconfirmed signup is kept as a record of your interest; it is not automatically deleted because you have not confirmed your email. You can ask us to delete your signup by contacting us. Confirmation status is kept separately from your signup. Sent-email and webhook operational records, analytics event records and source-attributed visit records are deleted after 90 days. An unsubscribed or suppressed address may be kept as long as necessary to ensure it is not emailed again. Optional beta answers are deleted when they are no longer needed for beta selection or when the related subscriber record is deleted. Contact messages are kept only as long as needed to respond and handle follow-up. Deposit, invoice and refund records are kept for the period required by Portuguese tax and accounting law. Visitor-counting cookies expire after 90 days, or earlier when you withdraw consent or clear site data.

Your rights

You may ask to access, correct, delete, restrict or receive a portable copy of your information. You may object to processing based on legitimate interests and to direct marketing, and may withdraw consent at any time. There is no solely automated decision-making producing legal or similarly significant effects. You may also lodge a complaint with Portugal’s Comissão Nacional de Proteção de Dados. To exercise a right, email danpeg@gmail.com.