Privacy policy

Gravity is made by Orbit (“we”, “us”). Orbit is a trading name of Harry Langley, a sole trader based in the United Kingdom. Harry Langley is the controller of the personal data described here: he decides how and why it is used and is responsible for protecting it.

Contact us about anything in this policy at privacy@orbitgravity.com. For anything else, write to hello@orbitgravity.com.

This policy covers orbitgravity.com, the Gravity waitlist and the emails we send about it. We'll update it before Gravity itself opens.

When you join the waitlist:

• Your email address (required) and first name (optional).
• Your choices: that you joined, whether you ticked the marketing box (we record an unticked box too), the exact wording you were shown and its version number, when you confirmed your email, and whether you later unsubscribe, leave or ask us to delete your details.
• Evidence of your consent: the date and time, the page you signed up on, your browser's user agent (a line of text that names your browser and device type), and a one-way, salted hash of your IP address. We never store your IP address itself.
• Which version of the home page you saw (we test different headlines) and, until you confirm your email, a temporary pseudonymous analytics ID (see “Analytics”), so we can tell which version leads to confirmed sign-ups. The ID is deleted when you confirm, or with the whole sign-up if you don't.

When you visit the site, whether or not you join:

• Cookieless usage analytics: pages viewed, clicks on our sign-up buttons and which page version you saw, linked only to a daily-changing pseudonymous ID. Details under “Analytics”.
• Security data: to stop automated sign-ups, we count sign-up attempts per IP hash for a short time. Our hosting provider also processes your IP address to deliver the site and keeps short-lived technical logs.

We don't ask for sensitive information (such as health, religion or financial details), so please don't send it. We don't make automated decisions about you, and we don't build advertising profiles.

• Running the waitlist: sending your confirmation email, then telling you about launch and your early access. Lawful basis: your consent, which you give by joining (UK GDPR Art. 6(1)(a)). These emails are also the service you asked for, so we rely on steps taken at your request before any contract (Art. 6(1)(b)) too. The notice next to the form says: “By joining, you agree that Orbit can email you about Gravity's launch and your early access. That's the service you're asking for. You can leave the waitlist any time.”
• Marketing emails (content strategy tips, product news and offers): only if you tick the separate box, which is never ticked for you, and only after you confirm by clicking the link we email you. Lawful basis: consent (Art. 6(1)(a) and PECR regulation 22). The box says: “Yes, send me content strategy tips, Gravity product news and offers from Orbit. Unsubscribe any time.”
• Analytics and A/B tests (learning which version of the page works, without cookies): our legitimate interests in running and improving our website (Art. 6(1)(f)). We keep it light: no cookies, a daily-changing ID, never your email or name, and nothing at all if your browser sends Global Privacy Control or Do Not Track.
• Security and abuse prevention (rate limiting, spam traps, technical logs): our legitimate interests in keeping the site and the waitlist safe (Art. 6(1)(f)).
• Keeping proof of consent: the law requires us to be able to show that you consented (Art. 7(1)), so we rely on legal obligation (Art. 6(1)(c)) and our legitimate interests in defending legal claims (Art. 6(1)(f)).

Where we rely on legitimate interests, we have weighed them against your rights and kept the data to a minimum. You can object at any time (see “Your rights”).

We measure how the home page performs, including tests where different visitors see different versions of the headline, with PostHog (EU Cloud) as our processor. We do this without cookies and without storing anything on your device: no cookies, no local storage, no session storage.

• How we tell visits apart: our server combines your IP address and browser user agent with a secret that changes every day, and turns them into a one-way code. That code is your ID for the day. It can't be turned back into your IP, and because the secret changes daily, we can't recognise you from one day to the next. The same code decides which version of the page you see. Your browser keeps it only in memory while the page is open.
• What is collected: pages viewed, which version of the page you saw, clicks on our sign-up buttons, that a sign-up was submitted and later confirmed, and whether marketing was opted into (yes or no). Plus what any web request carries: the page address, the referring site, your browser and device type, and an approximate location (country or city) that PostHog may work out from your IP address. PostHog is set to discard IP addresses. Your email and name are never sent to PostHog, and no profile of you is created.
• Opting out: if your browser sends Global Privacy Control or Do Not Track, we send no analytics at all, from the page or from our server. You can also object by emailing privacy@orbitgravity.com.
• Retention: analytics events are kept for up to 12 months, then deleted.

We never sell or rent your data, and we don't share it for advertising. We use a few service providers (“processors”) who handle it only on our instructions, under data processing agreements:

• Vercel (Vercel Inc., USA): hosts the website and runs the code behind the sign-up form. Its global network may handle your request outside the UK, including in the USA.
• Neon (USA-based provider): stores the waitlist database, hosted in London, UK.
• Resend (Resend, Inc., USA): sends our emails from its EU region (Ireland) and keeps delivery logs. If we use its contact list for waitlist emails, it also holds the email address, first name and marketing choice of confirmed sign-ups.
• PostHog (PostHog Inc., USA): cookieless website analytics on its EU Cloud, hosted in the EU. It never receives your email address or name.

We may also disclose data if the law requires it, or to protect our rights, for example in a legal dispute.

We keep data in the UK and the EU where we can: the database is in London, emails are sent from Ireland, and analytics are stored in the EU. Our providers are US companies, so some data may be transferred to the USA or other countries (for example, when Vercel serves a request in the USA, or for the providers' support and account administration). When that happens we rely on the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or the UK-US “data bridge” and EU-US Data Privacy Framework where the provider is certified. Ask us at privacy@orbitgravity.com if you'd like more detail.

• Unconfirmed sign-ups: the confirmation link works for 48 hours. If you never confirm, we delete your details 30 days after you signed up (our clean-up runs regularly, so this can take a few extra days).
• If you leave the waitlist: we stop emailing you straight away and delete your details 30 days later. Choose “Leave and delete my details” to delete them immediately.
• Confirmed sign-ups: until 12 months after Gravity launches, or until you leave, whichever comes first. After that we delete the details of anyone who hasn't become a user.
• Marketing consent: until you unsubscribe. Every email has a link to do that.
• Consent records: kept while we hold your details and for up to 6 years afterwards, as proof. When your details are deleted, we remove your email, name, IP hash and user agent, and keep only an anonymous record of what was agreed or withdrawn, and when.
• Analytics: up to 12 months. Sign-up rate-limit records (IP hashes): about 2 days. Hosting and email delivery logs: kept by Vercel and Resend for a short period under their standard settings.

Under UK GDPR (and the EU GDPR, if you live in the EU) you have the right to:

• access the data we hold about you and get a copy;
• correct it if it's wrong;
• delete it;
• restrict how we use it, or object to uses based on legitimate interests, including analytics;
• take it with you (data portability) in a common, machine-readable format;
• withdraw consent at any time. This doesn't affect anything we did before you withdrew.

How to use them:

• Every email has an unsubscribe link. On that page you can stop marketing, leave the waitlist, or leave and delete your details straight away. Mail apps that show an “Unsubscribe” button use the same one-click link.
• For anything else, email privacy@orbitgravity.com. It's free, and we reply within one month. We may ask you to confirm the request from the email address on the waitlist, so we know it's you.

This site doesn't set cookies or store anything on your device, which is why there's no cookie banner. Our cookies statement explains more. If that ever changes, we'll ask you first.

The waitlist is for people aged 16 or over. If you're under 16, please don't join. If we learn that someone under 16 has signed up, we'll delete their details.

We use encrypted connections (HTTPS) throughout, store IP addresses only as one-way hashes, use signed links for confirming and unsubscribing, keep the consent log tamper-resistant, and limit database access to the owner. No system is perfectly secure, but if a breach ever puts your data at risk, we'll tell you and the ICO as the law requires.

If you're unhappy with how we handle your data, please contact us first at privacy@orbitgravity.com and we'll try to put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, phone 0303 123 1113. If you live in the EU, you can complain to the data protection authority in your country.

If we change this policy, we'll update the date at the top. If a change matters to you (for example, a new use of your data), we'll tell you by email before it takes effect and, where the law requires, ask for your consent again.

Orbit, a trading name of Harry Langley. Privacy questions and requests: privacy@orbitgravity.com. Everything else: hello@orbitgravity.com.