Privacy notice · Aviso de privacidad · Version 2026-10-19
What we keep, and why.
CYRCUL is not launched yet. Right now this site does one thing with your data: it remembers the email you give us so we can tell you when the app is live. This page says exactly what that involves.
Who is responsible
Under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), this is the responsable. If you are in the European Economic Area or the United Kingdom, the same person is the controller under the GDPR.
What we collect
- The email address you type into the waitlist form.
- The moment you joined, and later the moment you confirmed your address.
- The country your connection came from, as derived by our hosting provider. Not your IP address: we do not store it.
- Your browser's identification string (the "user agent"), to tell real signups from automated ones.
- The version of this notice that was in force when you joined.
That is the whole list. We do not ask for your name, we do not read your contacts, and we do not buy data about you from anyone.
Why, and on what basis
One purpose: to send you a single email when CYRCUL launches and to give you early access, as the form promises. We rely on your consent, which you give by submitting the form, and which the confirmation email asks you to reaffirm. We do not use your data for profiling, advertising, or anything else, and we do not sell it. You can withdraw consent at any time, see "Your rights" below.
Cookies and storage
cyrcul.com sets no cookies, so there is no cookie banner to click away. If you pick a colour for the light, that choice is saved in your own browser's local storage and never leaves your device. The bot check and the visitor statistics described below work without cookies and without identifying you.
Who else touches the data
- Cloudflare, Inc. hosts the site, stores the waitlist in a database located in western North America, runs the bot check on the form (Turnstile) and provides anonymous, cookie-free visitor statistics.
- An email delivery provider, once launch emails are sent, will process your address solely to deliver them. We will name it here before the first message goes out.
Both act on our instructions, under contracts that bind them to confidentiality. Beyond that, your data is not transferred to anyone, unless the law obliges us.
How long
Until CYRCUL launches and the promised email has been sent, plus twelve months, after which the waitlist is deleted. If you withdraw consent before that, your entry is deleted within thirty days.
Your rights
You can ask us to tell you what we hold about you, to correct it, to delete it, or to stop using it. These are the ARCO rights under Mexican law (access, rectification, cancellation, opposition), and the equivalent rights under the GDPR. To exercise them, write to [email protected] from the address you signed up with, or reply to any email we send you. We answer within twenty business days. If you are unhappy with the answer, you can complain to Mexico's data authority, the INAI, or to the authority in your own country.
Children
CYRCUL is for people aged 13 and over, and the waitlist is too. If a child has joined, write to us and we will remove the entry.
Changes
If this notice changes in a way that affects what we do with your data, we will email everyone on the waitlist before the change applies. The version date at the top always shows the notice in force.