Back

Privacy policy

Controller

Pongo (project in formation), Berlin. Privacy enquiries: hallo@pongo.app

Waitlist

When you join the waitlist we process your email address, the place you select and — if you select Berlin — the neighbourhood (Ortsteil) you choose, plus optionally your first name and your chosen language. Pongo launches in Berlin neighbourhood by neighbourhood; the neighbourhood is used solely to tell you when Pongo goes live near you.

Sign-up uses double opt-in: you first receive an email with a confirmation link. You are only added to the waitlist after you click it. As proof of consent we store the time of consent and of confirmation.

The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time — via the unsubscribe link in every email or by messaging us. Processing carried out before withdrawal remains lawful.

Newsletter (optional)

In addition to the launch notice you can voluntarily subscribe to the Pongo newsletter with updates on the project's development and new features. This consent is separate from the waitlist: the box is never pre-ticked, and without it you only receive the message about the launch in your neighbourhood.

For the newsletter we process the same data (email address, optional first name, place/neighbourhood, language) plus whether and when you consented. The legal basis is your consent under Art. 6(1)(a) GDPR, confirmed via the same double opt-in.

You can unsubscribe at any time via the link in every email or by messaging us, without any effect on your waitlist entry. We send no third-party advertising and never pass your address on for advertising purposes.

Abuse protection

To prevent automated bulk sign-ups we never store your IP address in clear text, only a SHA-256 hash salted with a secret value. That lets us limit sign-up attempts per hour. The hash cannot be traced back to you and is deleted after a short period.

Hosting and storage

The website runs at our hosting provider, which produces technically necessary server logs. Waitlist data is stored in a Supabase database in the EU. Only authorised people have access; the browser cannot read this data directly.

Retention

We keep your waitlist data until Pongo launches in your city, at most 24 months, or until you withdraw your consent. After that we delete it.

No advertising trackers

We use no advertising tracking, no advertising cookies and no third-party profiling.

Your rights

You have the right at any time to:

  • access the data we hold about you (Art. 15 GDPR)
  • have inaccurate data corrected (Art. 16 GDPR)
  • erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR) and withdrawal of consent (Art. 7(3) GDPR)
  • lodge a complaint with a data protection authority (Art. 77 GDPR)