Privacy

Last updated 9 August 2026

OverPoweredApps is built by ortoPilot, a solo developer in the UK, who is the data controller for everything described here. Questions, or a request to be removed: [email protected].

Right now this site is a waiting list and nothing else. This page describes only that.

What the waiting list stores

When you submit the form on the front page, these are written down:

• Your email address. This is the whole point of the form.
• A short source tag, if you arrived by a link that carried one (for example ?r=stream). It records which announcement you came from, nothing about you.
• The page that referred you, and your browser's user-agent string.
• A salted one-way hash of your IP address - not the address itself. It exists solely to stop one machine submitting the form hundreds of times, and it cannot be turned back into your IP.

Why

To send you one message when access opens. The lawful basis is your consent, given by submitting the form. You can withdraw it at any time, and every message will carry a one-click unsubscribe.

No email is sent to you today, not even a confirmation. The list is stored and left alone until there is something to announce.

What does not happen

• Your address is never sold, rented, shared or passed to anyone for their own use.
• There is no advertising, no ad network, and no profiling.
• This site sets no cookies and loads no analytics or tracking scripts.

Storage on your device

If you join the list, your browser stores a single item locally so a return visit shows "you're in" instead of asking you to sign up again. It never leaves your device and is not readable by this site's servers. Clearing site data removes it.

Who processes it

• Supabase - hosts the database the list is stored in.
• Cloudflare - serves this site and handles the form submission.
• Resend - will deliver the announcement email when there is one. It has not been used for this list yet.

Each acts on instructions only. Cloudflare and Supabase keep their own operational and security logs, on their own schedules, as any host does.

How long

Until the announcement goes out and you have had the chance to unsubscribe, or until you ask to be removed - whichever is sooner. If the project is abandoned, the list is deleted rather than kept.

Your rights

Under UK GDPR you can ask for a copy of what is held about you, ask for it to be corrected or erased, withdraw consent, or object to its use. Email [email protected] and it will be actioned. Removing you from the list takes one line and is never argued with.

If you are not happy with the response you can complain to the Information Commissioner's Office.