Privacy Policy

1. Who handles this waitlist

Vibewright Labs LLC, a Georgia limited liability company based in Atlanta, United States, operates this iBAR launch waitlist and is responsible for the information described here. Contact hello@vibewrightlabs.com about privacy, removal or a mailing contact.

These disclosures concern the current waitlist; they do not identify the seller for a future hardware order. Any future store will identify its seller and provide the relevant sales and privacy terms before accepting orders.

2. What we receive and why

• Your email address: submitted when you request the single iBAR launch notification. We use the normalised address to identify your waitlist entry.
• Signup information: the most recent signup time and, when available, a country code supplied by the website delivery provider. Earlier entries may contain a country code supplied by Cloudflare; new entries may contain one supplied by Bunny.
• Technical information: Bunny processes IP addresses, requested URLs, browser information and security/performance metadata to deliver and protect the site. To limit waitlist abuse, a separate Bunny Database stores a keyed hash of the client IP address in an hourly rate counter. The waitlist record itself does not store an IP address. Cloudflare continues to provide DNS during this transition and may process DNS query metadata.
• Correspondence: if you email us, we receive your address and whatever information you include so we can respond and handle your request.

We use the waitlist to send the one launch email you requested. Joining does not subscribe you to a newsletter or our other companies' marketing. An ordinary support or privacy email does not add you to the list.

Where EU or UK data-protection law applies, we rely on your consent for the requested launch email, legitimate interests in running a secure site and answering requests, and legal obligations for records or disclosures required by law. You can withdraw the launch-email request at any time.

3. Providers and other recipients

Bunny delivers and secures this website, stores active waitlist entries in private Storage, and holds short-lived rate counters in a separate Database. Its delivery and security systems may process request metadata and generate operational logs or service statistics. The waitlist is not made available through a public storage URL. Cloudflare continues to provide authoritative DNS during the transition. A historical waitlist copy in Cloudflare Workers KV and earlier Cloudflare Web Analytics records may be kept temporarily for migration verification and rollback; Cloudflare is not the destination for new signups after cutover. Google Fonts supplies fonts used by the landing page and private store preview and receives the connection information needed to deliver those resources. The legal pages use system fonts.

PostHog processes optional website analytics only if you allow them, as described below. This is separate from the waitlist and from essential delivery and security records.

Only the staff who need to manage the launch list or answer you, including relevant parent and iBAR product-team staff, may use your information for those purposes. Our mailbox and any launch-email delivery provider process the address and message needed for delivery. We may also disclose information to professional advisers, where legally required, to protect rights or safety, or in a business transfer with appropriate protections.

We do not sell waitlist information or share it for cross-context behavioural advertising. Providers may process information in the United States and other countries. If applicable law restricts a transfer, an authorised transfer mechanism is required; contact us for details relevant to your information.

4. Retention and removal

We keep the active launch list while it is needed to provide the launch notification you requested. We remove an entry when you withdraw, after the requested launch notice has been sent, or when the launch list is abandoned or closed. This is a purpose-based retention rule; active waitlist entries do not currently expire automatically. A limited record may be retained where necessary to document a privacy request, prevent an unwanted email, meet a legal obligation or resolve a dispute.

A rate-limit counter becomes eligible for removal 61 minutes after its latest use. Expired counters are deleted when the form next receives a valid signup request, so they can remain longer if the form is idle. During the migration, a historical Cloudflare Workers KV copy may remain temporarily for verification and rollback. We will apply valid removal requests to both the active Bunny list and any retained Cloudflare copy, and remove the historical copy when reconciliation and rollback needs end. Email correspondence, provider delivery records, security logs and backups have separate retention cycles; deleting a waitlist entry does not instantly erase those copies. We retain correspondence while needed to answer you or document the resulting issue or relationship, and other records while needed for security, recovery or legal obligations. Access to residual backup copies is restricted until their ordinary replacement or expiry.

To leave the list, email hello@vibewrightlabs.com from the signup address. We may verify that you control the address before changing it. No purchase or account is needed to request removal.

5. Cookies, fonts and measurement

The public waitlist does not require an account or an advertising cookie. Hosting and security services may use necessary browser checks or cookies to keep the site available and prevent abuse. Authorised preview users can receive an ibar_preview access cookie with a 30-day lifetime; it is unrelated to launch-email signup. The private store preview may save cart choices in your browser's local storage. Preview checkout details are not submitted to us, and no preview order or payment is placed.

Bunny's essential delivery and security records are separate from optional PostHog analytics. Google Fonts receives a request when the landing page or private store preview loads its fonts. We do not use session replay, advertising pixels or personalised advertising on this waitlist. Optional PostHog measurement is described below.

Browser blocking settings can limit third-party requests. We do not currently change essential hosting, security or provider-level operational measurement in response to Do Not Track. We do not sell or share information for advertising, so Global Privacy Control does not need to stop a sale or advertising disclosure here.

Optional website analytics

Optional PostHog analytics is off until you choose Allow analytics. If allowed, we count public page visits and declared signup or enquiry actions, including successful form responses. We send a public page path, a broad traffic-source category, event time, and random identifiers that last only for the current page. We do not send form contents, email addresses, private links, raw campaign tags, recordings or advertising identifiers. We use PostHog's US service with IP storage and location enrichment disabled; ordinary network requests still reach its infrastructure.

The Analytics choices button lets you withdraw permission at any time. We save only your allow/off choice in this site's local storage until you clear or change it. Global Privacy Control and Do Not Track keep this optional analytics off. Withdrawal stops future measurement and clears the in-memory identifiers; it cannot retract events already received. These choices do not stop essential hosting, security or a submission you request. Analytics events are retained according to our PostHog project retention setting and reviewed for continued usefulness; the identifiers are not reused across page loads or connected to your account.

PostHog processes these optional measurements for us; see PostHog's privacy notice. Permission to analytics is separate from requesting email updates or a service.

An accepted waitlist submission is counted only when the site receives a successful response, and only with analytics permission. It is not a purchase, qualified lead or proof of a new unique subscriber.

6. Privacy requests, security and age

Contact hello@vibewrightlabs.com to ask for access, a copy, correction or deletion of your information. Depending on applicable law, you may also have rights to portability, restriction, objection, consent withdrawal, an appeal or a complaint to a data-protection authority. We will respond within the applicable legal period, use proportionate identity verification and explain any lawful exception. We do not penalise privacy requests or make automated decisions with legal or similarly significant effects from this waitlist.

We use HTTPS, restricted access and provider security controls, but no service can guarantee absolute security. This waitlist is intended for people aged 13 and older. If you believe a child under 13 has joined, contact us so we can investigate and remove the information where appropriate.

7. Changes

We will update the date above when this policy changes. If our purposes materially change, we will give the notice and obtain any further permission required before using information that way. A launch-list signup does not authorise future purchase, companion-software or unrelated marketing data uses.

See our Website and Waitlist Terms.