CarveCoreBack to the site
Privacy

Your data

Last updated 25 July 2026

CarveCore™ is still being built. This page explains exactly what happens to the details you give us when you join the waitlist, answer our questionnaire, or simply browse the site.

Who is responsible

The site and the waitlist are run by Damiano Carradori, acting as the data controller, reachable at privacy@carvecore.com.

What we collect

Your email address, name where provided, and the language of the page you signed up on are kept in one contact record. We separately record when, where and under which wording you consented to CarveCore™ updates. If you take part in our questionnaire, we store your answers about your surfing and training. Choosing to hear from us at the end records contact consent without storing any identifier that links your contact record to those questionnaire answers. Every questionnaire answer is optional.

Why we collect it

To tell you when CarveCore™ opens, and to understand who is interested so the training we build fits real people. Your details are used for nothing else, and never sold. We make no automated decisions about you based on this data, and the site is not directed at children.

Legal basis

We process your waitlist details and questionnaire responses on the basis of your consent (Article 6(1)(a) GDPR). For the waitlist, you consent by ticking the box next to the signup form. For the questionnaire, you consent by selecting “Share my experience” after reading the information on its welcome screen. We save your answers as you progress, including incomplete responses, and record which privacy wording applied when the questionnaire began. Answering the questionnaire does not subscribe you to updates. If you choose to hear from us at the end, we record your contact consent separately, including its date, language and wording version, without storing any identifier that links it to your answers.

How long we keep it

We keep active contact and waitlist details for 24 months after your latest submission. If you unsubscribe, we immediately stop marketing updates and retain your information in a suppressed state so we can honour that choice and maintain the consent history. A separate deletion request is handled under your data-protection rights. Questionnaire responses, whether complete or incomplete, are kept for 12 months from the date we first collect them. We then delete or anonymise the relevant data.

Who else sees it

Your data is stored in a PostgreSQL database hosted on AWS in Frankfurt, Germany. We use Vercel to host the site and Neon to provide the database. These providers may use approved subprocessors to provide their services. Where personal data is transferred outside the European Economic Area, appropriate safeguards apply, including the EU-U.S. Data Privacy Framework and, where applicable, standard contractual clauses. We do not sell your personal data or share it for others’ own marketing purposes.

How we measure site use

We use first-party, cookieless analytics to count page views and selected interactions, including clicks on key calls to action, waitlist submissions, and questionnaire starts and completions. Analytics events do not include your email address or questionnaire answers. For each event, our server-side analytics system creates a pseudonymous code derived from your IP address and browser information, mixed with a secret value that changes every day. This lets us count the same visitor within a day, but the code is not designed to recognise you on later days. We do not store the raw IP address or full user-agent string in our analytics database. Alongside the code, we record the page and language, general browser, operating system and device type, approximate country and city, and how you arrived (referrer and campaign parameters). We process this information on the basis of our legitimate interest in measuring our audience and understanding how the site is used (Article 6(1)(f) GDPR). You can object to this processing by writing to privacy@carvecore.com. We do not use analytics cookies, build advertising profiles or track you across other websites. These records live in the same database in the European Union and are retained for up to 12 months. We then delete or anonymise them.

Your rights

You can ask for a copy of your data, correct it, have it deleted, restrict or object to how it is used, or receive it in a portable format. Write to privacy@carvecore.com and we will answer within one month.

Withdrawing consent

Use the unsubscribe link in any CarveCore™ update to stop future marketing emails immediately. You can subscribe again later by giving fresh consent. For access, correction or deletion requests, email privacy@carvecore.com. Your questionnaire answers cannot be found from the contact details you leave because no identifier links the two records. Withdrawing does not affect the lawfulness of anything done before you withdrew.

Cookies

No analytics cookies, no advertising and no cross-site tracking. The site sets only cookies it strictly needs to work: one that lets you resume the questionnaire where you left off, kept for thirty days, plus one that remembers your language choice. They are not used for advertising or to follow you across other websites.

Complaints

If you believe we are mishandling your data, you can complain to the data protection authority in the country where you live.