Privacy Policy
Effective Date: January 1, 2026

1. Data Controller
This website is operated by the COIL 2027 project, an open-source initiative.
Contact: https://github.com/animata-systems/coil/

2. What Data We Collect
- Waitlist form submissions (name, email, company/project) collected via Tally.so
- Functional preferences stored locally in your browser (theme, text size) via localStorage — this data never leaves your device

We do not use analytics, tracking cookies, or advertising technologies on this website.

3. Legal Basis for Processing (GDPR Art. 6)
- Waitlist form data: your explicit consent at the time of submission
- localStorage preferences: legitimate interest in providing a functional user experience (no personal data is transmitted)

4. Third-Party Processors
- Tally.so (Tally B.V., Belgium) processes waitlist form submissions on our behalf. See Tally's privacy policy at https://tally.so/help/privacy-policy

5. Data Retention
- Waitlist submissions are retained until the COIL 2027 launch or until you request deletion, whichever comes first
- localStorage data persists in your browser until you clear it

6. International Transfers
Tally.so may process data within the EU/EEA. If data is transferred outside the EEA, Tally.so applies appropriate safeguards (Standard Contractual Clauses).

7. Your Rights (GDPR Art. 15-22)
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time

To exercise any of these rights, open an issue at https://github.com/animata-systems/coil/ or contact us through that repository.

8. Cookies
This website does not set cookies. We use localStorage for theme and text size preferences only. This data is stored locally on your device and is never transmitted to any server.

9. Children's Privacy
We do not knowingly collect data from anyone under 16 years of age.

10. Changes to This Policy
We will update the effective date at the top of this page when changes are made. Material changes will be communicated via our GitHub repository.

11. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence.