Updated 9 November 2026
Privacy policy
This policy covers the Evermore waitlist and this introductory website. The dating platform is not operating yet.
Who controls your data?
The controller is MB „Vimstead“. For privacy questions or to withdraw consent, contact [email protected].
What do we collect now?
The form asks only for your email address. We also store your chosen interface language, the consent text and version, the date of consent and the scheduled deletion date. Ticking the box confirms you are an adult; we do not request your birth date or identity document. We do not collect profiles, names, photos, income statements, facial analysis data or payment details at this stage.
Why do we use your email?
With your consent (GDPR Article 6(1)(a)), we save your address, send an email to confirm it, and send one launch invitation. The email includes links to confirm or remove your address. This is not consent to newsletters or partner advertising. We do not sell addresses. Joining the list is free and does not guarantee future membership.
How long do we keep it?
Until you withdraw consent or for no more than 12 months after signup. After sending your invitation, we delete the record within 30 days, or earlier if the original limit expires. Deletion runs daily. Time-limited provider backups may remain for their recovery cycle; we do not use them for new invitations.
Traffic measurement and security
We aggregate page views, form starts, button clicks, new addresses and confirmations by day, language, bounded campaign source and device class. We keep source and campaign on the signup record, without creating an individual browsing history or sending email addresses in analytics requests. We use no analytics cookies, ad pixels or browser identifiers. DNT and GPC stop browser analytics. For security we derive a short-lived HMAC key from the IP; raw IPs are not stored in the database and keys are deleted within 48 hours. Cloudflare Web Analytics also measures page traffic and performance, including aggregated device, browser, country and page data, without analytics cookies. DNT and GPC also prevent this measurement from loading. The host also processes connection data. Security relies on legitimate interests (GDPR Article 6(1)(f)).
Who processes the data?
We use Cloudflare for hosting, a Supabase project in Frankfurt for the database, and Resend for email. The email provider receives the recipient address and message content and returns delivery or error information. Provider operations may involve processing outside the EEA, subject to their data processing agreement safeguards. Only authorised administrators access the list. The unsubscribe link can remove your address without an account.
Your choices and rights
You may withdraw consent at any time and ask to access, correct, erase or restrict your data, or receive a portable copy where applicable. You may object to processing based on legitimate interests. Write to [email protected] from the address you submitted. Withdrawal does not affect earlier lawful processing. We normally respond within one month. You may also complain to Lithuania’s State Data Protection Inspectorate: vdai.lrv.lt.
The future platform
Selection, community, messaging and membership features described on this site are planned. We do not currently assess income or appearance or make automated membership decisions. Before collecting further data, we will provide separate terms and information.