Privacy Policy
Last updated July 17, 2026
This policy explains how Get Elbow handles personal data on its pre-launch website and waitlist. It applies to the English and Lithuanian versions of getelbow.com.
Data controller
Get Elbow is the data controller for this Lithuania-based pre-launch project. You can contact us about privacy or your data at hello@getelbow.com.
What we collect
If you join the waitlist, we store your email address, selected customer or professional role, optional city, language, signup source, confirmation status and relevant timestamps. If you consent to analytics, we also process a pseudonymous visitor ID stored in a one-year cookie, pages viewed, browser user agent, referrer, UTM campaign tags and a salted, daily-changing hash of your IP address. We do not store the raw IP address.
Purposes and legal bases
We use your email and confirmation record, with your consent, to operate the waitlist and send launch or early-access messages. We use analytics only with your consent to understand site usage and improve the service. We process limited technical data where necessary for our legitimate interests in preventing abuse, protecting the service and diagnosing failures.
Service providers and transfers
We use Vercel for hosting, Turso/libSQL for the database, Resend for email delivery and Cloudflare Turnstile for abuse prevention. These providers process data on our behalf under their own data-protection terms. Some processing may occur outside the European Economic Area using the safeguards described in the relevant provider terms, such as adequacy decisions or standard contractual clauses. We do not sell personal data or share it with advertisers. Website fonts are served directly from Get Elbow rather than a third-party font service.
How long we keep data
Unconfirmed waitlist records are removed after the confirmation link has been expired for 30 days. Confirmed waitlist records are kept until launch communications end or you withdraw, whichever comes first; deletion requests are completed without undue delay and normally within 30 days. Consent-based analytics records are kept for no longer than 14 months. Providers may retain limited security logs under their documented retention policies.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent at any time. Email hello@getelbow.com to exercise a right. We normally respond within one month.
Analytics and cookies
Analytics do not run until you choose Accept. You can decline without losing site functionality. Use Cookie settings in the footer at any time to change your choice; declining removes the visitor cookie, stops further analytics and requests deletion of analytics linked to that visitor ID.
Security
We use access controls, encrypted connections, signed administrator sessions, rate limits and data minimisation to protect personal data. No internet service is completely risk-free, so please contact us if you suspect a security issue.
Complaints
You may lodge a complaint with Lithuania’s State Data Protection Inspectorate (VDAI). Visit the VDAI website.
Changes and contact
We may update this policy as the product or providers change. The latest version and date will remain on this page. Questions or requests can be sent to hello@getelbow.com.