Launch-list privacy notice
Version: launch-privacy-2026-09-26-v3. Effective 26 September 2026. This notice covers the optional Dearest launch list, separately from an app account.
Who is responsible
Story Beat Pictures Kft., 2094 Nagykovácsi, Szent Lóránt utca 6., Hungary; company registration number 13-09-118220. Contact: hello@dearestjournal.com.
Your choice and what we collect
If you tick the consent box and submit, we use the name and email address you give us to send one email announcing Dearest’s launch. The legal basis is your consent under GDPR Article 6(1)(a). We record your name, address, signup and consent times, consent wording and version, privacy-notice version, website source and, after sending, the notification date. This is not permission for newsletters, advertising campaigns or sharing your address for others’ marketing.
Joining is optional. You can browse the website and use Dearest without joining this list. No app account, relationship information or payment is required. Your name is recorded with consent because Hungarian electronic-advertising rules require the consenting person’s name. We do not use this list for profiling or automated decisions.
Withdraw as easily as you joined
Use Leave the launch list on the website and enter your address. No account or consent checkbox is required to leave. A successful request deletes the address and its consent record from the active list. The response does not reveal whether an address was registered. You can also contact us by email or post at the controller address above. Withdrawal does not affect the lawfulness of processing before withdrawal. It cannot recall an email already sent.
How long we keep it
The active list is checked for deletion daily. Entries expire 12 months after signup, or 30 days after the launch email is recorded as sent, whichever is earlier. Withdrawal removes the entry sooner. Repeated submissions do not extend this period. Backup copies may remain until the hosting provider’s backup cycle expires; they are not used for mailing. If the list is restored, deletion and withdrawal requests must be reapplied before use.
Service providers and security
Supabase processes and stores the list for us. Vercel delivers the website. Access to the list is restricted to authorised administration and the signup service; public visitors and app accounts cannot read it. We do not sell addresses.
These providers and their subprocessors may process data outside the EEA. Their data-processing terms describe applicable transfer safeguards, including Standard Contractual Clauses: Supabase’s data-processing addendum and Vercel’s data-processing addendum. Contact us to request information about the safeguards that apply to your data.
Abuse prevention
Hosting services receive technical request information, including IP addresses and browser headers, to deliver and protect the service. Our signup service derives a rotating keyed hash from the network address for rate limiting; it does not put a raw IP address in the launch list. These rate-limit records are checked daily and deleted after one day. The basis for necessary abuse prevention is our legitimate interest in protecting the service, GDPR Article 6(1)(f). No advertising cookies or tracking pixels are added by the signup form.
Your rights
You may request access, correction, deletion, restriction or portability of your personal data where applicable, withdraw consent at any time, and object to processing based on legitimate interests. Contact hello@dearestjournal.com. We normally respond within one month; if a permitted extension is needed, we will explain it. You can complain to your local supervisory authority or Hungary’s National Authority for Data Protection and Freedom of Information (NAIH), and seek a judicial remedy.