Who handles your data: Lojator, operated from Aveiro, Portugal — hello@lojator.com.
What we keep: your email, the language of the page, the dates you signed up and confirmed, where you came to this page from (for example, a social network) and, if you give it, your answer to “Do you sell anything yet?”.
What for: to give you access in order of sign-up when Lojator opens to the public, and to let you know about that opening. On the basis of your consent (GDPR art. 6(1)(a)).
Who helps us: Supabase (database, EU), Resend (email delivery), Vercel (hosting) and Upstash (anti-abuse counters, per IP, which expire within an hour). Some operate from the US, under standard contractual clauses.
How long: until we give you access or until you ask to leave. If you don't confirm your email within 14 days, we delete the record.
Your rights: to access, correct, erase and withdraw your consent at any time — through the “leave the list” link in the email or by writing to hello@lojator.com. You can lodge a complaint with the CNPD (cnpd.pt), the Portuguese data protection authority.