Privacy Policy
Last updated: June 21, 2026. Plain-English version: we keep your email, we don't sell it, you can leave whenever.
What we collect
When you join the waitlist or subscribe to Case Distillery, we collect:
- Email address — to send you the newsletter and waitlist updates
- Locale preference — to deliver the language version you signed up from (en / zh)
- Source page — which page you signed up from, so we know what's working
- Country code (from Cloudflare) — for aggregated geographic stats only, not tied to identity
- Browser user agent — for spam-prevention and debugging signup failures
- Timestamp of signup
We do not collect: your name (unless you give it to us), your IP address (Cloudflare proxies and we don't log it), or any third-party cookies for analytics.
Cookies
Case Distillery does not use tracking cookies, advertising cookies, or analytics cookies. The only cookies on this site are essential ones set by Cloudflare's edge network for security and DDoS protection.
If we add lightweight analytics later (e.g. Plausible, Cloudflare Web Analytics), we'll update this page and use only privacy-preserving aggregate measurement — no individual user tracking.
How we use your email
- To send you the newsletter you signed up for
- To notify you when Founding 100 opens (waitlist subscribers only)
- To handle account and billing matters once paid subscriptions launch
- That's it. We don't send promotional emails for other products. We don't share your email with affiliate partners.
Where your data lives
Email and signup metadata are stored in Cloudflare D1 (SQLite database hosted on Cloudflare's network). Newsletter delivery, when it launches, will use a vetted email service provider (provider TBD; we'll list them here once chosen).
Payment processing, when paid subscriptions launch, will be handled by Stripe. We never see your full card number; Stripe's privacy policy applies to payment data.
How long we keep it
As long as you're subscribed, plus 90 days after you unsubscribe (for fraud prevention and accounting). After that, your record is deleted.
If you want immediate deletion at any point — including before that 90-day window — email us and we'll process it within 7 days.
Your rights
You can, at any time:
- Unsubscribe — one click in the email footer (when newsletter launches), or email us to remove from waitlist
- Request your data — we'll send you everything we have on file within 14 days
- Request deletion — full erasure within 7 days, no questions asked
- Update your email — just reply to any newsletter
GDPR / CCPA
If you're in the EU/UK (GDPR) or California (CCPA), you have explicit rights to access, port, correct, and delete your data, and to object to processing. The "Your rights" section above describes the same rights in plain English. To exercise any of them, just email us.
Children
Case Distillery is for operators and adults running businesses. We don't knowingly collect data from anyone under 16. If we learn we have, we'll delete it.
Changes to this policy
We'll update the "Last updated" date and email all subscribers if we make material changes. Trivial wording fixes don't count.
Contact
Questions, deletion requests, or anything else: [email protected]