Only what is needed
The waitlist uses your email, consent and confirmation information.
DUELUS · YOUR DATA
Privacy,
explained clearly.
This policy explains what the Duelus coming-soon website and founding waitlist collect, why the information is used, and the choices available to you.
AT A GLANCE
The essentials
You stay in control
Every launch email includes a direct unsubscribe option.
No advertising trackers
This coming-soon site does not use analytics or advertising cookies.
WHO IS RESPONSIBLE
Scope and controller
This version applies to the Duelus coming-soon website, founding waitlist, confirmation and unsubscribe flows, and related support communications. It does not describe platform features that have not yet launched. We will update this policy before additional Duelus services go live.
Duelus is the controller of the personal data described in this notice.
- Controller
- Duelus
- Location
- Vienna, Austria
- Privacy contact
- support@duelus.com
Contact us at the address above if you have a privacy question or want to exercise a right.
WHAT WE COLLECT
Data we process
Waitlist details
Your normalized email address, request source, consent-notice version, consent timestamp, status and founding position where applicable.
Confirmation records
Confirmation and unsubscribe token hashes, link expiry, confirmation time, unsubscribe time, and record creation or update times.
Abuse-prevention data
A keyed, pseudonymous request fingerprint derived from limited request information, plus counters and time windows used for rate limiting.
Messages you send
Your email address and the content of messages when you contact Duelus through a support or business mailbox.
Duelus does not ask for payment details, account passwords, card collections or profile information through this coming-soon website.
WHY WE USE IT
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Verify your signup through double opt-in and send launch news, product previews and early-access invitations. | Your consent under Article 6(1)(a) GDPR. |
| Administer founding-waitlist order and eligibility for the first-user benefits described on the website. | Your consent and steps you request before joining the future service. |
| Prevent automated submissions, protect the website and diagnose technical failures. | Our legitimate interests under Article 6(1)(f) GDPR in operating a secure and reliable service. |
| Answer privacy, support or business messages. | Taking steps at your request, our legitimate interests in responding, and legal duties where applicable. |
| Keep limited consent and opt-out evidence. | Compliance with legal obligations and legitimate interests in demonstrating compliance and honoring your choice. |
You may withdraw consent at any time. Withdrawal does not affect processing that occurred before it and does not prevent processing that is necessary under another lawful basis.
DOUBLE OPT-IN
Waitlist and founding benefits
Submitting the form creates a pending record and sends a confirmation link. You join the active waitlist only after using that link. The link normally expires after 48 hours. If you do not confirm, the pending record is scheduled for deletion after 14 days.
Founding positions are assigned by the server-side confirmation time, not the initial form-submission time. The position is used to administer eligibility for early-user benefits. Joining the waitlist does not create a paid subscription or a Duelus platform account.
You can withdraw at any time through the unsubscribe link in a Duelus email. An unsubscribed address will no longer receive waitlist or launch communications unless it completes a new double-opt-in signup later.
WHO HELPS US
Service providers and transfers
Duelus does not sell personal data. The current coming-soon site uses these provider categories:
GoDaddyWebsite and database hosting, server logs, and outgoing email relay.Provider notice ↗
Microsoft 365Duelus business mailboxes and messages sent to office or support.Provider notice ↗
Providers process data under contractual and security obligations. They may process data in the European Economic Area and other countries where they or their subprocessors operate. Where a transfer outside the EEA requires safeguards, Duelus relies on an applicable adequacy decision, the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism offered under the relevant provider agreement.
A provider may also process limited information for its own legal, security or operational duties as explained in its privacy notice.
HOW LONG IT REMAINS
Retention and deletion
Expired pending records are removed by scheduled cleanup.
Old pseudonymous counters are removed by scheduled cleanup.
Records are used while launch communications and invitations remain active.
Opt-out and consent evidence may remain as needed to honor the choice and demonstrate compliance.
Longer only when needed for an unresolved matter, security issue or legal claim.
Retained according to host settings and only as needed for security and reliability.
We may keep information longer where required by law, necessary for a legal claim, or needed to investigate abuse. When retention is no longer justified, the information is deleted or anonymized.
TECHNICAL DATA
Cookies and server logs
The site uses one essential session cookie named duelus_waitlist. It protects form
submissions and carries short-lived session state. It is configured as HttpOnly, Secure when the
site uses HTTPS, SameSite=Lax, and expires when the browser session ends.
Standard hosting logs may contain an IP address, requested URL, time, response status and browser or user-agent information. These logs support delivery, diagnostics and security. The coming-soon site does not currently use advertising cookies, behavioral advertising, or optional analytics cookies.
YOUR CONTROLS
Your privacy rights
Subject to applicable law and relevant exceptions, you may ask Duelus to:
Access your data
Correct inaccurate data
Delete your data
Restrict processing
Provide portable data
Stop certain processing
Withdraw consent
Explain our response
We may need to verify your identity before acting on a request. We normally respond within one month; the GDPR permits an extension for complex or numerous requests. You will be told if that applies.
Make a privacy requestSAFEGUARDS
Security and younger visitors
Duelus uses safeguards designed to protect waitlist data, including HTTPS, restricted database access, token hashing, secure session settings, rate limiting, access controls and limited admin exports. No internet service can guarantee absolute security.
The waitlist is not directed to children under 14. If you believe a child submitted personal data without the authorization required by applicable law, contact us so we can investigate and delete it.
QUESTIONS OR CONCERNS
Contact and complaints
Privacy and supportsupport@duelus.com
Controller locationVienna, Austria
You also have the right to complain to the supervisory authority where you live or work. In Austria, the competent authority is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria.
We may update this policy when the website, providers, retention practices or applicable law change. The version and effective date at the top identify the current notice. Material changes will receive additional notice where appropriate.
CONNECT · COLLECT · COMPETE