Privacy
Last updated
This policy covers the website at thecantry.com and its waitlist. It does not yet cover the app, which is not released. The app’s sections will be added on this page.
Who runs this site
The Cantry is operated by Cavvera LLC, doing business as The Cantry.
Our mailing address is Cavvera LLC, 5900 Balcones Drive, Suite 100, Austin, TX 78731. For any question about this policy or about your data, write to support@thecantry.com.
What we collect, and why
When you join the list, we store:
- Your email address. We use it to send the email that asks you to confirm your address, one email when the app launches, and a few short notes before then.
- The path of the page you joined from, so we know which pages people join from.
- The date you joined, the date we last sent you a confirmation email and how many we have sent, the date you confirmed, and the date you left the list, if you did.
- A one-way hash of the random code in your confirmation link, so the link can be matched to your record. The code itself is not stored.
When the form or a link from our email is used, the server that receives the request reads the internet address (IP address) it came from. It uses that address to limit repeated tries, and it passes the address to the person check described below. For the limit it stores a keyed one-way hash of the address beside a count, never the address itself.
When you open a page, the site sends a page view to our visit counter. It holds the page’s full address without anything after a # sign, the page’s title, the address of the page that sent you here, your browser with its version and language, your operating system, the kind of device, your screen and window size, your time zone, and the text your browser uses to identify itself. The counter’s servers also see your internet address. When you join the list, one more event is sent, holding the path of the page you joined from. Neither one holds your email address, and the visit counter is never told who you are.
The pages you reach from a link in our email send no visit data at all.
The services that handle data
We use five services to run the site and the list. Each one receives only what it needs for its part.
| Service | What it is used for |
|---|---|
| Vercel | Serves this site. Its request logs include the internet addresses of visitors. |
| Supabase | Stores the list, and runs the server code that receives the form and the links in our email. |
| Resend | Sends our email, so it receives your email address. |
| Cloudflare Turnstile | Checks that a person, and not an automated program, is using the form. It loads only when you first put the cursor in the email field. It then receives your internet address and signals from your browser. |
| PostHog | Counts visits. It receives your internet address and your browser's description, and turns them into a number that stands for one visitor for one day. It uses no cookie. |
Resend receives your address when we send you an email. Before we send a later message to the list, the addresses of people who confirmed are also brought into Resend.
What we don’t do
- We don’t sell your data.
- We don’t share your data for advertising.
- This site has no advertising trackers and no advertising cookies.
- We don’t tell the visit counter your email address, and we don’t use it to build a profile of you.
Cookies
This site sets no analytics cookies and no advertising cookies. Visits are counted without a cookie and without storing anything in your browser.
The person check on the form is Cloudflare Turnstile, and it is Cloudflare’s own code. It loads only when you first put the cursor in the email field. Cloudflare says Turnstile works from signals such as your internet address and details of your browser, and that it uses them to tell people from automated programs and not to identify or profile anyone. Turnstile may set a cookie or store something in your browser to do that work. Cloudflare’s Turnstile privacy notice points to Cloudflare’s cookie policy for the cookies Cloudflare uses: read Cloudflare’s Turnstile privacy notice.
Your choices
- Leave the list. Use the Leave the list link in any email from us, or write to support@thecantry.com.
- Ask for your record. Write to support@thecantry.com and we will send you what the list holds about your address.
- Ask for your record to be deleted. Write to support@thecantry.com and we will delete it.
Please write from the address you joined with, so we know the record is yours.
How long we keep data
- An address that is never confirmed is kept until you ask us to remove it.
- A confirmed address is kept while you are on the list.
- If you leave the list, we stop writing to you. We keep the address, marked as having left, so that later messages to the list are not sent to it. It stays until you ask us to delete it. If the address is entered in the form again, it is treated as a new sign-up.
- The counts used to limit repeated tries hold no internet address. Old ones are removed as new requests arrive.
- Visit counts hold no email address. They are kept in PostHog, and the request logs of the services above are kept by those services.
Children
This site is not directed to children under 13, and we don’t knowingly collect a child’s email address. If you believe a child has joined the list, write to support@thecantry.com and we will delete the address.
Where data is processed
The Cantry is run from the United States. The services named above store and handle data in the United States. Some of them, such as Vercel and Cloudflare, also pass requests through servers in other countries on the way.
California visitors
California’s online privacy law asks a site to say a few things plainly.
- The kinds of personal information this site collects are listed under “What we collect, and why”.
- Who receives it is listed under “The services that handle data”.
- To see your record, or to have it corrected or deleted, write to support@thecantry.com.
- This site does not respond to a browser’s do-not-track signal. It treats every visit the same way: it sets no analytics or advertising cookies, and it does not follow you to other sites.
- We have not set up any of the services above to collect information about what you do on other sites.
- The date at the top of this page is the date this version took effect.
Visitors from Europe
This site is written for visitors in the United States. If you visit from Europe or anywhere else, your data is handled as this policy describes, in the United States. You can ask for your record, or for it to be deleted, in the same way: write to support@thecantry.com.
Changes to this policy
When this policy changes, the new version is posted on this page and the date at the top changes.