← membraneum

Privacy Policy

Effective date: 17 July 2026
Last updated: 5 October 2026

membraneum is an independent pre-launch project operated by Viktor Golovin ("membraneum", "I", "me", or "my"). I am the data controller responsible for the personal data described in this policy. membraneum is not currently operated by a registered company.

This policy explains what personal data I collect through the membraneum website and waitlist, why I use it, which service providers process it for me, and the choices available to you.

1. Personal data we collect

Information you provide

When you join the waitlist, I collect your:

  • email address;
  • first and last name, if provided;
  • country and company, if provided;
  • answer about how you found membraneum, if provided;
  • message, if provided; and
  • preferences concerning a product preview or business interest.

Only your email address is required to join the waitlist.

If you contact me directly, I also receive the information included in your message and any subsequent correspondence.

Information collected automatically

When you use the website, the hosting, security, and analytics services I use may process limited technical information, such as your IP address, browser and device type, referring page, pages visited, and approximate location based on your IP address.

I use a keyed hash of your IP address and email address to limit repeated waitlist requests. These counters expire within 24 hours. I do not add your IP address to your waitlist contact record.

2. How I use personal data

I use personal data to:

  • add you to the membraneum waitlist;
  • send launch, access, preview, and occasional product updates that relate to your signup;
  • respond to messages and business enquiries;
  • understand interest in membraneum and improve the website;
  • operate, secure, and troubleshoot the website; and
  • comply with applicable law and enforce my rights.

I do not use waitlist data for unrelated advertising, and I do not sell personal data.

New requests remain unsubscribed until email ownership is confirmed. The form does not send email.

3. Legal bases

Where the GDPR, UK GDPR, or similar law applies, I rely on:

  • Consent to manage your waitlist registration and send the updates described when you join. You may withdraw consent at any time.
  • Legitimate interests to secure the website, prevent abuse, understand aggregate website usage, respond to enquiries, and maintain records needed to honour unsubscribe requests.
  • Legal obligation when I must retain or disclose information to comply with applicable law.

Withdrawing consent does not affect processing that occurred before the withdrawal.

4. Service providers and disclosures

I use service providers to operate the website and waitlist. They process personal data to provide their services to me and under their own contractual and legal obligations. Current providers include:

  • Resend, which stores waitlist contact records and supports email delivery;
  • Vercel, which hosts the website and provides infrastructure and website analytics; and
  • PostHog, which measures page visits and waitlist actions and stores technical service logs when enabled;
  • the shared rate-limit storage provider, which stores short-lived counters under keyed hashes;
  • other professional or technical providers where reasonably necessary to operate, secure, or maintain membraneum.

I may also disclose personal data:

  • when required by law, court order, or a lawful request made by a public authority;
  • to protect the rights, safety, or security of membraneum, its users, or others; or
  • if the membraneum project or its assets are transferred to a future company or buyer, subject to appropriate confidentiality and data-protection measures.

I do not share personal data with third parties for their own independent marketing, and I do not sell or rent the waitlist.

5. International transfers

My service providers may process personal data outside your country, including in the United States. Where required, these transfers are covered by recognised safeguards used by the relevant provider, such as adequacy decisions or approved contractual clauses. You may contact me for more information about the safeguards relevant to your data.

6. Retention

I retain your waitlist information until the earliest of:

  • your request to delete it;
  • the date you leave the waitlist; or
  • 12 months after membraneum launches, unless you establish an ongoing relationship with me or separately choose to receive further communications.

After you unsubscribe, I may retain the minimum information needed on a suppression list so that I do not contact you again. I may retain information longer when required by law, needed to resolve a dispute, or necessary to protect my legal rights.

Technical logs and rate-limiting records are retained only for as long as reasonably needed for security, troubleshooting, and abuse prevention.

7. Your choices and rights

You can unsubscribe by using the link in an email I send or by contacting me. Depending on where you live, you may also have the right to:

  • request access to your personal data;
  • correct inaccurate or incomplete data;
  • request deletion of your data;
  • restrict or object to certain processing;
  • receive a portable copy of data you provided;
  • withdraw consent at any time; and
  • lodge a complaint with your local data-protection authority.

These rights may be subject to legal limits. I may need to verify your identity before completing a request.

Residents of jurisdictions that provide rights concerning the sale or sharing of personal data may contact me using the details below. I do not sell personal data or share it for cross-context behavioural advertising.

8. Email communications

Waitlist emails will identify membraneum and provide a way to unsubscribe.

I may still send a necessary non-marketing response if you contact me directly or ask me to complete a privacy request.

9. Cookies and analytics

When enabled, PostHog measures visits to the home, business, and privacy pages in cookie-free mode. It also counts waitlist button clicks, valid form submissions, and accepted or failed responses. This setup does not store PostHog cookies or data in browser local or session storage. It sends basic browser and device data and page URLs without query strings or fragments. It does not send waitlist form values, record sessions, or create person profiles.

Server logs sent to PostHog contain the waitlist route, response status, fixed error codes, and deployment version. These logs do not contain submitted form values, request headers, IP addresses, or contact identifiers.

The website uses Vercel Web Analytics and Speed Insights to understand website traffic and performance. If I later introduce non-essential cookies or advertising technology, I will update this policy and, where required, ask for consent before using them.

You may configure your browser to block or delete cookies. Blocking essential storage, if any is used, may affect website operation.

10. Security

I use reasonable technical and organisational measures intended to protect personal data. No internet transmission or storage system is completely secure, so I cannot guarantee absolute security.

11. Children

The website and waitlist are not directed to children under 16, and I do not knowingly collect their personal data. If you believe a child has provided personal data, contact me so that I can review and delete it where appropriate.

12. Changes to this policy

I may update this policy when the project or my legal obligations change. I will post the revised version here and change the "Last updated" date. If a change materially affects how I use waitlist data, I will provide additional notice where required.

13. Contact

For privacy questions, requests, or complaints, contact:

Viktor Golovin
Email: work.glvn@pm.me