Privacy notice

Who is responsible

The controller of your personal data is GRASU'S LAB SRL, a company registered in Romania (registration number: J2025052251008; registered address: Șoseaua Nordului, Nr. 66-70, Ap. B 08, București Sectorul 1, România), trading as ogoria.

For anything in this notice, write to contact@ogoria.com. We have not appointed a Data Protection Officer, because at our size we are not required to.

What we collect, and why

This site has one form. Joining the waitlist stores the following:

What	Why
Your email address	To confirm your signup, and to email you when ogoria launches.
Which page and campaign you signed up from (utm_* values, if present)	To understand which advertising actually works, so we spend less of it.
The date and version of the consent text you agreed to	Required by Article 7(1) so we can demonstrate that consent was given, and to what wording.

We deliberately do not store your name, your IP address, or your device details alongside your signup. None of them are needed to send an email, and Article 5(1)(c) says not to take what we don't need. Our host does see your IP in the course of serving the page and rate-limiting the form — that is unavoidable for any website — but we never join it to your address.

The legal basis

Your consent — Article 6(1)(a) GDPR — given by ticking the box on the form. The box is never pre-ticked. You can withdraw consent at any time, and withdrawing is as easy as giving: reply "unsubscribe" to any email from us, or write to contact@ogoria.com. Withdrawing does not affect anything done before you withdrew.

Who else sees it

We use two service providers, and no others:

• Resend (Plus Five Five, Inc., United States) — stores the waitlist and delivers the email. Acts as our processor under a data processing agreement, with EU–US transfers covered by Standard Contractual Clauses.
• Netlify (Netlify, Inc., United States) — hosts this website. Its servers keep short-lived access logs that include IP addresses, as any web server does. We do not use those logs to identify anyone. Transfers are covered by Standard Contractual Clauses.

We do not sell your data, we do not share it for anyone else's marketing, and we do not use it for automated decision-making or profiling.

Advertising and cookies

This site sets no cookies and runs no analytics by default. One thing is stored on your device: if you arrived from an advertisement, the campaign name from the link is kept in your browser's own session storage so it survives you clicking through to this page and back. It is written on any page carrying the signup form, it never leaves your browser unless you submit the form, and it is discarded when you close the tab. Nothing else is stored.

If we later run advertising, a Meta (Facebook) measurement tag may be used. It will not load unless you explicitly allow it when asked, and choosing "No thanks" means nothing is loaded and nothing is stored. There is no legitimate-interest route around that, and we won't pretend there is.

How long we keep it

Until ogoria launches and for 12 months after, or until you ask us to remove you — whichever comes first. If the product is abandoned before launch, we delete the whole list and tell you we have.

Your rights

Under the GDPR you can ask us to:

• give you a copy of what we hold about you (access, Art. 15);
• correct it if it is wrong (rectification, Art. 16);
• delete it (erasure, Art. 17);
• restrict or object to how we use it (Art. 18 and 21);
• send it to you or someone else in a portable format (Art. 20);
• withdraw your consent at any time (Art. 7(3)).

Write to contact@ogoria.com and we will answer within 30 days. There is no charge.

If you think we have handled your data badly, you can complain to the Romanian supervisory authority, ANSPDCP — dataprotection.ro — or to the authority where you live.

Changes

If this notice changes materially, we will update the date at the top. Because the only data we hold is a waitlist address, we will not quietly repurpose it: if we ever want to use your address for something other than the launch email, we will ask you first.