Privacy notice

This notice covers the early-access list for Harness: what we keep when you leave your email, why we keep it, where it is stored, and how to have it changed or deleted.

Last updated

Who is responsible

Robotropic is responsible for your data (the controller, in the words of the GDPR). For anything about this notice or your data, email hello@robotropic.com.

What we collect

When you join the list we store:

  • Your work email address.
  • Your role, if you choose one.
  • Which form you used, for example the one at the top of the home page.
  • A record of your consent: the date and time you signed up, and which version of the form wording and of this notice you saw.
  • A keyed hash of your network address. We do not store your IP address itself. The hash is made with a secret key, so it cannot be turned back into your address without that key, but it still counts as personal data and we treat it that way.
  • The first 120 characters of your browser's user agent, which names your browser and operating system.

To stop automated sign-ups, we also keep a short-lived record of each attempt to use the form: the same hashed network address and the time. These records are deleted within about an hour.

You don't have to give us any of this. Your email address is only needed if you want to hear from us about early access.

Why we use it

We use your email address and role to contact you about early access to Harness, and to understand which kinds of teams are interested. We don't send newsletters, we don't add you to marketing lists, and we never sell your data.

The legal basis is your consent, which you give when you send the form. You can withdraw it at any time; that doesn't affect anything we did before you withdrew it.

The hashed network address, the user agent and the attempt records are there to keep the list free of spam and abuse. For those we rely on our legitimate interest in running the form securely.

Where it is stored

Your details are stored in a Cloudflare D1 database created in Cloudflare's EU jurisdiction, so the data is kept in the European Union.

Cloudflare also runs this website. It processes requests on our behalf, under its data processing terms, and may handle a request in a data centre near you, including outside the EU, on the way to that database.

How long we keep it

We keep your details until you unsubscribe or ask us to delete them. If we haven't been in touch with you for 24 months, we delete them anyway.

Who sees it

Only the Robotropic team, and Cloudflare as the service that stores it for us. When you join, the team also gets a short email with your address and role, so it passes through our mailbox provider, Google (Gmail). We share it with no one else unless the law requires us to.

Cookies and tracking

This site uses no tracking cookies and no advertising tools. Cloudflare may set a strictly necessary security cookie to filter out automated traffic; it is not used to follow you around the web.

To see how many people visit and where they come from, we use Cloudflare Web Analytics. It sets no cookies, does not fingerprint your device and does not follow you to other sites. It gives us totals only: pages viewed, the page that linked to us, the country, the browser and device type, and how fast pages load. We rely on our legitimate interest in understanding how the site is used.

The home page keeps one small note in your own browser, and never sends it to us: until you close the tab, that you have already seen the opening animation.

Your rights

You can ask us to:

  • Show you what we hold about you.
  • Correct anything that is wrong, such as your role.
  • Delete your details.
  • Stop contacting you, which withdraws your consent.

You can also ask us to restrict how we use your data, to give it to you in a portable format, or object to how we use it.

To do any of this, email hello@robotropic.com from the address on the list, or tell us which address it is. We reply within one month. It costs nothing.

If you think we have handled your data badly, you can complain to a data protection authority, for example the one in the country where you live or work. We'd appreciate the chance to put it right first.

Changes to this notice

When we change this notice we update the date at the top. If a change affects how we use your email address, we'll tell you before it applies.