Privacy Notice

Who is responsible and how to contact us

The Schnitz is a pre-launch project run by Irene Bulintis and Isabel Hoffet, equal co-founders based in Spain and Switzerland. We are not an incorporated company. We jointly decide how project personal data is used and are joint controllers.

Contact us at schnitz@irene.gg or write to our monitored correspondence address:
Carrer de Pere IV, 105, 109, Sant Martí, 08018 Barcelona, Spain.

We share responsibility for this notice, consent records, secure access, deletion and handling your requests. Requests received at the contact point above are coordinated between us. You may exercise your rights against either operator.

What we collect and why

• Invite list: your email address, the city you plan to visit next if you submit it, your subscription preferences, and a record of when and how you consented, the wording version and the deletion deadline. We use this to manage the list, understand interest in cities, and send your invite and early-access updates through Resend. We rely on consent under Article 6(1)(a) GDPR where applicable.
• Correspondence: your email address, messages and any details you choose to share when you contact us. Our legitimate interest under Article 6(1)(f) GDPR is answering enquiries and resolving concerns. Where we must fulfil a legal obligation, including responding to applicable privacy rights, Article 6(1)(c) applies.
• Website requests: technical information such as IP address, browser information, requested URL, request time and error information. This is processed to deliver and secure the website and investigate faults or abuse, based on our legitimate interest in a reliable and secure service under Article 6(1)(f) GDPR.
• Aggregate analytics: we measure page visits and fixed interaction events to understand whether the website is useful. To the extent request information processed for this purpose is personal data, we rely on our legitimate interest in improving the website under Article 6(1)(f) GDPR, with the data-minimising safeguards described below.

Joining the invite list is optional. Without an email address and consent we cannot send an invite or early-access updates, but you can still browse. Your email is saved before the optional city question; you can skip it. The city you submit is linked to that signup. A random, short-lived update token protects this follow-up; only its hash is stored with the signup, and it cannot authorize changes after one hour. This does not verify ownership of your email address. Please do not include sensitive information in the city field or send more information than needed in a message.

We do not sell the invite list, use it for unrelated promotions, or make automated decisions with legal or similarly significant effects. The walking demonstration uses prerecorded content and a simulated route; it does not request your microphone or device location.

Services that receive personal data

• Vercel: hosts and delivers the site, runs the signup endpoint, and processes request and security information. Signup details pass through its servers to Resend. See its privacy policy and data processing terms.
• Vercel Web Analytics: receives page views, page URLs, referrers, browser/device categories and approximate location to understand website traffic. It uses a hash derived from the request rather than cookies and does not track visitors across different websites. Visitor-session information is discarded after 24 hours; this is not a 24-hour limit on aggregate statistics. See the Web Analytics privacy information.
• Resend (Plus Five Five, Inc.): stores email addresses, cities, consent records and subscription preferences, and is our service for sending invite and early-access emails. Sending also involves delivery information, such as delivery failures and unsubscribe requests. See its privacy policy, data processing terms and subprocessors.
• Fastmail: handles the contact mailbox at schnitz@irene.gg, including messages and replies. Submitting the signup form does not itself send an email to this mailbox. See its privacy policy and data protection agreement.
• Plausible Analytics: we use Plausible’s hosted service for anonymous, aggregate website analytics to understand traffic and which pages are useful. It measures page views, engagement, browser/device categories and approximate location without cookies or persistent identifiers. Our configuration removes referrers, URL query strings and fragments. It processes IP addresses and browser information to count daily visitors, but does not retain the raw IP addresses or full User-Agent. Visitor data is processed and stored in the European Union. See its visitor data policy and data processing agreement.
• Mapbox: delivers the interactive map and receives technical and map-usage information as described below. See its product privacy policy and data processing terms.

The two operators access project data to perform these tasks. Providers use infrastructure and support subprocessors to deliver their services; some also process limited security, billing or service-usage information for their own purposes. Information may be disclosed when required by law.

Cookies, maps and page interactions

When you choose a language, we set the first-party schnitz_locale cookie to remember that choice for up to one year. It is not an advertising identifier. You can change the language again or delete the cookie in your browser. The site can also use your browser’s language preference when choosing the initial page language.

We first show a map snapshot served by this website, without connecting your browser to Mapbox. Only if you choose “Accept optional” in the cookies popup do we load the interactive map and allow Mapbox’s browser storage, based on your consent under Article 6(1)(a) GDPR where applicable. Mapbox receives your IP address, browser/device information, map requests and usage events for map delivery, service measurement, billing and security. The map shows a sample Barcelona walk, not your actual position. Your waitlist email and selected city are not sent to Mapbox by our signup code.

The first-party schnitz_map_consent cookie remembers only your versioned map preference for 180 days, not a visitor identifier. “Reject optional” leaves the live map disabled. You can withdraw consent or enable the map later using “Cookie settings” in the footer. Withdrawing stops the live map and clears its event storage on this site; it does not undo requests already received by Mapbox.

The Mapbox library can store a randomly generated identifier and event information in browser local storage under names beginning with mapbox.eventData. Unlike the language cookie, local storage has no automatic browser expiry; you can remove it through your browser’s site-data controls. Loading the map again may recreate it. Mapbox’s own technical identifiers are separate from the local page events described below.

We use Vercel Web Analytics and Plausible Analytics to understand overall website usage without tracking people across websites. Both receive page views and browser/device category information without using cookies or persistent identifiers. We restrict reported page URLs to known public pages and strip query strings and fragments. Our page and signup interactions emit local browser events; only a fixed list of event names and the fixed page variant are forwarded to Plausible. We do not send signup email addresses, city-field contents or correspondence to analytics services. We suppress analytics events when your browser sends a Global Privacy Control or Do Not Track preference. Cookie-free analytics is separate from the optional Mapbox storage choice. We do not embed advertising pixels or a translation widget. Fonts, pictures and recorded demo audio are served with the website.

The optional translation link sends the public English notice URL and selected translation language to Google Translate only when you follow it. Google then receives the technical information associated with your visit and processes it under its privacy policy. No signup details are included in that link. Other external links likewise take you to independently operated websites.

Where data is processed

We access project data from Spain and Switzerland. Vercel’s configured server region is in the United States, and its delivery network operates internationally. Resend identifies the United States as its primary processing location. Fastmail operates infrastructure in the United States and the Netherlands and describes additional processing in Australia, the United Kingdom, India and Austria. Mapbox also processes data in the United States and through international service providers.

Protection and rights can differ between countries. Resend’s published data processing agreement includes EU standard contractual clauses and provisions for Swiss transfers. Fastmail’s agreement includes standard contractual clauses. Vercel and Mapbox also publish terms addressing international processing. Applicable safeguards depend on the service and contractual arrangement; a server location alone does not establish that data stays in that country. Contact us for information about the safeguards relevant to your data and how to obtain a copy.

How long we keep data

We delete your active waitlist signup and consent evidence within 12 months of collection, or earlier if the project ends. Sending an update or receiving a duplicate signup does not restart that period. This also covers working exports and signup copies we hold in mailboxes.

If you withdraw consent, we stop outreach and remove the active signup. We retain only the minimum email address and withdrawal record needed to prevent further messages until the original deletion deadline, then delete that record too. This limited use is based on our legitimate interest in respecting your choice, not permission to send further updates.

We keep ordinary enquiries only as long as needed to answer and resolve them. Privacy-request or dispute correspondence may need to be retained to demonstrate how a request was handled or meet a legal obligation; it is not used for outreach.

Technical logs and provider recovery copies are distinct from the active invite list. Deleting a contact or message does not necessarily erase every provider backup immediately. Fastmail describes a seven-day recovery period for deleted items, while some backup/search-index copies have no guaranteed purge time without a support request; it retains system logs for 375 days. We must account for those copies when handling a deletion request. See Fastmail’s deletion details.

Plausible’s daily visitor-counting salt is deleted every 24 hours; this is not a 24-hour limit on aggregate statistics. Those statistics remain in the analytics dashboard until deleted under the account’s retention settings or when we delete the site statistics. They are separate from your waitlist record and are not linked to it.

Vercel’s runtime-log availability depends on the hosting plan; its security records and provider backups may follow separate retention rules. Resend’s data processing terms address return/deletion and restricted retention where destruction is impracticable or legally restricted. Mapbox states that it normally retains IP addresses for 30 days, with possible extensions for security investigations or legal compliance. These provider records are not a reason to continue using your signup for outreach. Contact us for details about a specific record or deletion request.

Your choices and rights

You can withdraw consent at any time by emailing schnitz@irene.gg, replying to a project email asking us to stop, or using an unsubscribe link in a mailing. It is free and does not require an account. Withdrawal does not affect the lawfulness of processing before it was withdrawn.

Depending on the applicable law, you may request access, correction, deletion, restriction of processing and a portable copy of data processed automatically on the basis of consent. You may object to processing based on legitimate interests and to direct marketing. We may need proportionate information to verify that a request concerns your data.

We respond without undue delay, normally within one month under GDPR or 30 days for a Swiss access request. If a lawful extension applies, we will explain it within the initial response period.

You can complain to Spain’s AEPD, the Swiss FDPIC, or another competent authority, including your local EU supervisory authority. You do not have to contact us first.

Changes and help understanding this notice

We will update this notice when our processing changes and provide additional notice or seek fresh consent where required. This notice does not authorize a new purpose for existing signups. We publish it in English; automatic translations are provided for convenience. Please contact us if you need help understanding how your data is handled.