This notice covers Rosella’s early waitlist. A separate notice will apply before Rosella collects profile, identity, or member-experience information.
What we collect now
Your normalized email address, adult attestation, privacy acknowledgement, interface language, confirmation state, and limited anti-abuse records. We do not ask for gender, background, phone, social profiles, exact location, identity documents, or an intent essay.
Why we use it
To add and confirm your waitlist entry, provide private entry access, prevent duplicate or abusive submissions, send essential service email, share meaningful Rosella updates, and honor deletion.
Processors and location
Cloudflare hosts the site, security controls, Worker, and SQLite-backed waitlist. Resend delivers confirmation and access email. These processors may handle technical or delivery data outside Taiwan under their own safeguards.
Public waitlist count
The landing page publishes only the aggregate number of verified, active waitlist entries. Temporary, expired, and deleted entries are not counted. No identity, email address, individual status, or position is public.
Security
Email addresses are encrypted for recovery and separately keyed with HMAC for uniqueness. Bearer and one-time tokens are random and stored only as hashes. Cookies are Secure, HttpOnly, SameSite=Strict, and time-limited. We do not log emails, tokens, cookies, raw IP addresses, or verification documents.
Retention and deletion
Unconfirmed entries expire after 24 hours and their recoverable email is erased. Confirmed entries remain until the waitlist closes or you delete yours. Sessions expire after 30 days. Use the private manage-entry page to delete your email and invalidate access at any time.
Adults and later verification
Checking the 18+ box is an adult attestation, not proof of identity or age. Rosella will require separate identity and age verification before member access. Never email identity documents to us.
Rosella does not sell applicant data or use it for advertising profiles.