Privacy policy

Last updated 23 September 2026

This is how we handle your data when you visit this site or join our waitlist. We keep it short because we collect very little.

Who we are

The controller of your data is Wands, Workings & Whatnot p.s.a., Ludwika Waryńskiego 26/16, 00-650 Warszawa, PL (KRS 0001265903, NIP 7011331371, REGON 545712879). For anything about your data, write to admin@wandsandworkings.com.

What we collect

What you type into the waitlist form, plus when you signed up:

• your email address,
• the date and time you signed up,
• whether you signed up with or without JavaScript (a technical note, not linked to your device).

We don’t store your IP address. When you use the site, Cloudflare, which hosts it, processes your IP address briefly for security and to limit repeated sign-up attempts. That happens in memory, and the address is not kept with your sign-up or anywhere else by us.

Why, and on what basis

We use your email address only to send you updates about Wands, Workings & Whatnot and our apps. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by joining the waitlist. You can withdraw it at any time. Withdrawing doesn’t affect anything we did before you withdrew.

Where it’s kept

The waitlist is stored in a database run by Cloudflare, Inc., which processes it on our behalf as our processor. We don’t sell your data or share it with anyone else. Cloudflare may process data outside the EEA, including in the US; such transfers are covered by Cloudflare’s data processing addendum with the EU Standard Contractual Clauses (and the EU–US Data Privacy Framework).

How long

We keep your details until you unsubscribe or ask us to delete them.

Your rights

You can ask us to show you the data we hold about you, correct it, or delete it, and you can withdraw your consent at any time. Every email we send will have an unsubscribe link, or you can just write to admin@wandsandworkings.com. If you think we’ve handled your data wrongly, you can complain to the Polish data protection authority, the President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warszawa.

Cookies and tracking

None. This site sets no cookies and uses no analytics, trackers or third-party scripts. The one outside request is for our typefaces, which your browser loads from Google Fonts. Google receives your IP address when it serves them, as with any web request.