Here's exactly the data we collect and what we do with it.
v1 · 14 July 2026 · your consent record references this version
The short version
We ask for one thing only: your email address. And only in case you ask us to keep you informed. That's all. No name, cookies, trackers or analytics.
- What
- Your email address and a date of confirmation.
- Why
- To email you product updates.
- Where
- On servers in the EU, start to finish. Your data never leaves the EU.
- Who else
- Scaleway (EU), to send the emails on our behalf.
- Out
- Every email we send has a one-click link that both stops the emails and deletes your address.
The precise version is below, because the law rightly asks us to be exact. It's short too.
Who's responsible for your data
The data controller is José Brey, operating as Thoughtful Distractions, based in Madrid, Spain. This is a personal project run by one person, not a registered company (yet).
For anything about your privacy (questions, requests, complaints) email privacy@yellowrobots.ai. We'll read it ourselves.
What we collect, and why
- Your email address: to send you product updates. Kept until you unsubscribe or ask us to delete it.
- That you confirmed, and when: to prove your sign-up was genuine (the law calls this consent, and asks us to keep a record of it). Same retention.
- Short-lived technical logs of the sign-up/confirm step, to keep it working and catch abuse. Deleted automatically within 14 days.
That's it! No cookies, no analytics, no third-party scripts or trackers anywhere on this site.
What lets us do this (lawful basis)
Your consent: GDPR Article 6(1)(a). You give it by entering your email and then clicking the confirmation link (a "double opt-in").
Giving us your email is entirely voluntary. The only thing you miss by not is the updates. Nothing else on the site depends on it.
Who else is involved
One processor: Scaleway (Transactional Email), based in the EU. It delivers the emails on our behalf under a data-processing agreement, and handles your address only to send our emails.
No one else receives your data. We do not sell, rent or share it with advertisers or data brokers. The only other time we'd disclose it is if the law strictly required us to.
Where your data is processed
Entirely within the EU, both storage and email delivery. Your data is never transferred outside the EU/EEA, so none of the third-country-transfer safeguards apply here.
How long we keep it
- If you sign up but never confirm: your address is deleted after 7 days.
- If you confirm: we keep your address until you unsubscribe or ask us to erase it.
- Technical logs: deleted within 14 days.
Your rights, and how to use them
Under the GDPR you can, at any time:
- Withdraw your consent: one click, in every email we send. It stops the emails immediately, and withdrawing doesn't make anything we did beforehand unlawful.
- Be erased: that same one click also deletes your address; or email us and we'll do it.
- Access a copy of what we hold (your email and your confirmation date), correct it, or ask us to restrict or stop (object to) how we use it.
- Port: get it in a machine-readable form.
To use any of these, email privacy@yellowrobots.ai. We'll respond within a month.
Complaining to an authority
If you think we've mishandled your data, you can complain to a data protection supervisory authority. In Spain that's the Agencia Española de Protección de Datos (AEPD), or the authority in your own EU country (a directory is at edpb.europa.eu). We'd appreciate the chance to fix it first, but that's your right, not a hoop.
Automated decisions, and changes to this notice
We don't profile you and we don't make any automated decisions about you. You're on a list to get an email; that's the whole system.
If we change this notice we'll update the date at the top. If a change ever affects how we use data you've already given us, we'll email you about it before it takes effect.