Privacy Policy

Last updated: 18 August 2026

The short version. Corton is not launched yet, and this page is not a product. It does two things: it takes your email address so we can tell you when it ships, and it counts visits so we can tell which ads are worth paying for. Everything it records is listed below, in full. We don't sell your address, we don't share it with advertisers, and you can have it deleted by replying to any email or writing to the address at the bottom of this page.

Who runs this site

Corton is an independent product in pre-launch, built and operated by its founder. It is not yet a registered company, and there is no paid service and no user account at this stage. Questions about this policy, or about data held about you, go to contact@corton.app.

What we collect

Your email address, and only if you type it into the waitlist form yourself. It is the only thing the form asks for.
Basic usage analytics — which pages were viewed, where the visit came from (the referring site and the ad campaign in the link you followed), the country, region and city your connection resolves to, your time zone and browser language, the kind of device you are on and the size of your window. This is collected automatically, and it is what tells us whether an ad is working.
A random identifier for your browser, stored on your device the first time you arrive. It lets us tell one visit from the next on this site, and nothing more: it is not built from any characteristic of your device, and it cannot follow you to another site. It is shared with the analytics service named below, which is what joins your visits to one another, and with nobody else. Clearing your browser storage erases it.
When you submit the form, the two are joined: how long you had the page open, and the campaign you arrived from, are recorded alongside your address. If you first reached this site through an ad and came back later to sign up, that first campaign is kept on your device so we can still tell which one it was, and the record notes which of the two was credited. It also notes that the signup reached us through our own server rather than your browser, and which address of this site it happened on — the live one, or a test copy of it.
Two optional answers, if you choose to tap them. Once your address is stored, the page offers two one-tap questions: whether you work as a private investigator today, and what you use to track hours and mileage now. They exist so the product gets built for the people who signed up. Either one can be skipped, both can be skipped, and skipping them changes nothing about your place on the list. No other question is asked, and there is no free-text box. An answer is stored the way the signup is — through our own server, against the same record, noted with the address of this site it came from. It carries no email address of its own.

We do not record your screen or your mouse movements, we do not fingerprint your device, we do not ask for a name, a phone number, a company, or a payment method, and there is nothing on this site that collects information about your cases or your clients. We never read or store your IP address ourselves: the location above is worked out from it by our host and reaches us already reduced to a place name. It is unavoidably seen by the two services that carry the connection — our host, whose server logs hold it briefly, as every web server's do, and the analytics service, which is configured to derive the location from it and then discard it rather than keep it.

Why we collect it

The email address: to notify you when Corton opens, and occasionally to ask what you need from it. That's the whole list of uses. No newsletter you didn't sign up for, no sales sequence.
The analytics: to see how many people arrive, from where, and how many sign up — so a marketing budget can be spent on the channels that actually work rather than guessed at.

Who else sees it

Only the services needed to run the page. Each of them acts on our behalf, and none of them is allowed to use your data for their own purposes:

Vercel — hosts the site and serves these pages. Standard web-server logs, including IP addresses.
PostHog — holds both the waitlist and the analytics. Your address is stored there against the record of your visit, so we can write to you when Corton opens and know which campaign brought you. Configured with session recording switched off, click tracking switched off, and client IP addresses discarded once the location has been derived from them. Hosted in the European Union.
Advertising platforms — there is no advertising or measurement tag on this site today. If one is added so that an ad campaign can be measured, it would be told that a visit or a signup happened, never who you are, and never your email address. This page will say so before that happens.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in California law.

Cookies and browser storage

Two small values are kept in your browser's local storage: the random identifier described above, and the campaign you first arrived from if you arrived from one. The analytics also sets a cookie of its own to recognise a returning visit. There is no advertising cookie on this site. Clearing your browsing data removes all of it.

Blocking cookies, or using a tracker blocker, will not stop you from joining the waitlist — the form does not depend on either, and works with JavaScript switched off entirely.

How long we keep it

Waitlist email addresses are kept until Corton launches and you have been told about it, or until you ask for yours to be removed — whichever comes first. Before you submit the form your analytics record carries only the random identifier, with nothing in it that names you; from the moment you submit, your address is attached to that same record, so asking us to delete your data removes both.

Your choices

Wherever you live, you can ask us to tell you what we hold about you, correct it, or delete it. Write to contact@corton.app and it will be handled — there is no form to fill in and no account to log into. Every email we send will carry a one-click unsubscribe link.

California residents have these rights under the CCPA, and residents of the EU and UK have them under the GDPR. Exercising them will never cost you anything or change how you are treated.

Children

Corton is a tool for working professionals. It is not directed at anyone under 16, and we do not knowingly collect their information.

Changes to this policy

If this policy changes in a way that matters — new data collected, a new recipient, a new purpose — the date at the top changes, and anyone already on the waitlist is told by email before the change takes effect.