This page explains what personal data Taburo collects, why, who can see it and what you can ask us to do with it. It is written to match what the site actually does; when that changes, this page changes.
Who is responsible
The data controller is Sydney DE CLERCQ, acting as a private individual, Lyon, France. You can reach us at sydneydc.business@gmail.com. Full identification is on the legal notice page.
The waitlist
When you join the waitlist we store the email address you typed, the frame size and finish you selected (or "no preference"), the date and time of your signup, the country your connection appears to come from, and how you reached the site: the campaign tag in the link you followed, or the name of the site that linked to you, or "site" when there was neither. We do not store your IP address, your city, or any identifier that would let us recognise you elsewhere.
Why: to email you when pre-orders open and when the first batch ships, and to decide how many frames of each size and finish to produce. That second use is aggregated: we count how many people want a 50×70 in oak, we do not use your individual choice for anything else.
Legal basis: your consent (GDPR art. 6(1)(a)), given when you submit the form. You can withdraw it at any time by emailing us; we then delete your row.
How long: until the launch emails have been sent and the first batch has shipped, then the list is deleted, and in any case no later than 24 months after your signup. If you ask earlier, we delete immediately.
Where: in a database operated by Supabase, Inc. (https://supabase.com), hosted in the European Union. Only our own server code can read or write that table; it is not reachable from browsers.
We do not sell, rent or share the list with anyone. If we ever use a mailing service to send the launch email, it will be an EU-hosted provider bound by a data processing agreement, and this page will name it.
The composer
The wall you design is saved in your own browser (local storage on your device) so it is still there when you come back. It is never sent to us. Clearing your browser data clears it.
When you use a share link, the link itself carries the layout: the grid size, the finish and the identifiers of the cards you placed. Nothing about you is in it. Anyone who has the link can open that layout.
Card searches run on our own servers against a bundled catalogue. Card images are served through our servers, so third-party image hosts never see your IP address. Search terms are not stored.
Technical data
Like every website, our host (Vercel Inc.) processes your IP address and browser details to deliver pages and keep server logs for a short period. Our server functions run in Paris (region "cdg1"). Vercel Inc.is a United States company; transfers are covered by the European Commission's Standard Contractual Clauses under its data processing agreement.
To protect the signup form from abuse we count requests per IP address in memory for a few minutes. Those counters are never written to disk.
We measure traffic with Vercel Web Analytics (privacy policy). It uses no cookies and no persistent identifier: it records page views, the referring site, an approximate country and the device type, and cannot recognise you across days. We use it to see which pages people visit, nothing more.
Cookies
This site sets no advertising or tracking cookies, which is why there is no cookie banner. The only cookie in use is a login cookie on the private administration page, set only for the site operator when they sign in.
Your rights
Under the GDPR you can ask us to show you the data we hold about you, correct it, delete it, restrict its use, hand it to you in a portable format, or withdraw your consent. Email sydneydc.business@gmail.com from the address you signed up with and we will act within one month.
If you believe we have handled your data improperly you can lodge a complaint with the French supervisory authority, the CNIL (cnil.fr), or with the authority of the EU country you live in.
Children
The waitlist is intended for adults. We do not knowingly collect data from anyone under 15; if you think a child has signed up, tell us and we will delete the entry.
Changes
When the site starts taking orders this notice will be extended to cover payment, delivery and invoicing data. The date at the top of this page is the date of the last material change.