Privacy Policy

Last updated: July 2026

The short version: we collect the minimum we need, never sell your data, and you can ask us to delete it at any time. The longer version follows.

Who we are

Tucked ("we", "us") operates this website and the waitlist for the Tucked app. Tucked is responsible for the personal information described below. For any privacy request, contact help@itstucked.com.

What we collect, and why

• Email address (required) — to confirm your signup, administer the waitlist, send a confirmation reminder where needed, and send launch updates and your invite. Legal basis: consent (the box you tick when you join).
• First name (optional) — so our emails can say hello properly. Legal basis: consent.
• City — to understand where to launch next. Legal basis: consent.
• How you hear about things & your best find (optional) — to help us build a better product. Legal basis: consent.
• Referral data — if you arrived via a friend's link, we record a code that connects your signup to theirs. Our legitimate interest is operating the referral system and determining invite priority fairly.
• Campaign data (UTM parameters) — so we can understand which outreach channels bring people to Tucked. Our legitimate interest is measuring and improving our launch activity.
• Anti-abuse data — we use limited technical information, including a protected representation of your IP address, to prevent automated signups and enforce rate limits. Our legitimate interest is protecting the waitlist and website from misuse.
• Analytics — only if you accept analytics cookies, we use PostHog (EU-hosted) to understand how the site is used: page views, clicks, rough device type. Legal basis: consent, via the cookie banner. Choosing "Essential only" means no analytics run at all.

What we don't do

• We don't sell your data. Ever.
• We don't share your email with advertisers or "partners."
• We don't run advertising trackers on this site.

Where your data lives

Your signup data is stored with Supabase in the European region selected for our project. We use Resend to deliver confirmation, reminder and waitlist emails; Resend's primary processing operations are in the United States and it uses contractual safeguards for international transfers, including the UK International Data Transfer Addendum where applicable. Cloudflare hosts and protects the website and provides Turnstile anti-abuse checks, which may involve processing limited technical information. Analytics, if you consent, are processed by PostHog using its EU infrastructure.

Keeping your data safe

We use reasonable technical and organisational measures to protect your information, including encrypted connections, restricted administrative access, hashed confirmation tokens and measures designed to prevent automated abuse. No online service can guarantee absolute security.

How long we keep it

We keep waitlist data while the waitlist is operating and until we have completed the initial launch invitation process. We will then delete or anonymise information we no longer need, unless we are required to retain it for legal reasons. If you withdraw consent or ask us to delete your data, we will remove it unless we have another lawful reason to keep it.

Your rights

Under UK GDPR you can ask us to access, correct, delete, or export your data, restrict or object to processing, and withdraw consent at any time. Email help@itstucked.com and we'll sort it — no forms, no fuss. Every marketing email we send includes an unsubscribe link (one-off transactional emails, like the signup confirmation, don’t need one — they only ever arrive because you asked). If you're unhappy with how we've handled something, you can complain to the ICO at ico.org.uk, though we'd appreciate the chance to fix it first.

Cookies

We use browser storage to remember your cookie choice and to preserve referral and campaign information connected with your visit. If you choose “Allow analytics”, PostHog also uses cookies or browser storage to help us understand how the site is used. If you choose “Essential only”, PostHog does not load and analytics events are not sent. You can reset your choice by clearing this site's browser storage.

Changes

If this policy changes in any meaningful way before launch, we'll note it here and, where appropriate, email you.