Privacy Policy

Last updated 27 July 2026

Short version: this site collects your email address and nothing else. No cookies, no analytics, no trackers, no connection to your bank. You can have it deleted at any time by asking.

Who runs this site

Cool Down is built and operated by Yarra Alhamoud, an individual based in Riyadh, Saudi Arabia. For anything in this policy, including deletion requests, email yarra.alhamoud@gmail.com.

What this policy covers

This policy covers the Cool Down website, which is currently a waitlist for an app that has not been released. The Cool Down app will have its own privacy policy when it launches, and this page will point to it.

What is collected

Your email address, the date and time you submitted it, and a note of which version of the consent wording you agreed to. That is the entire list. The timestamp exists so there is a record of when you agreed to be emailed. No name, no phone number, no payment details, no bank connection, no location, no device fingerprint.

What is not collected

• No cookies are set by this site.
• No analytics, no advertising pixels, no session recording, no third-party scripts.
• No access to your bank, cards, purchases or accounts. Cool Down never has that access, by design.

The hosting provider records standard server logs, which can include your IP address and browser type, for security and reliability. Those logs are not used to build a profile of you. The signup form itself also counts recent submissions per IP address so one source cannot flood it. That count lives only in the memory of the server handling the request, is never written to the database and is never logged, and it disappears when that server recycles. The basis for it is a legitimate interest in keeping the form working.

Why your email is collected

To send you one email when Cool Down launches, and to give waitlist members early access before the public release. That is the only use. Your address is never sold, rented or shared with advertisers.

If you are in the UK or the EU, the legal basis is your consent, given when you submit the form. You can withdraw it at any time by emailing the address above or using the unsubscribe link in the launch email.

Where it is stored

In a managed PostgreSQL database provided by Neon, hosted in the European Union, on a site served by Vercel. Both act as processors under written data processing agreements and handle the data only to keep the site running.

Two transfers happen. Vercel serves the site from a global network, and I read and administer the list from Saudi Arabia, which is outside the EEA and the UK. Where data leaves the EEA or the UK, the safeguard relied on is the European Commission's Standard Contractual Clauses with the UK addendum, included in Vercel's and Neon's data processing agreements. You can get a copy by emailing the address below. Saudi Arabia has its own data protection law, the PDPL, which applies to me directly.

How long it is kept

Your address is deleted 90 days after the launch email is sent, or as soon as you ask for deletion, whichever comes first. If Cool Down has not been released by 31 December 2027, the entire list is deleted on that date whether or not anyone asks.

Your rights

You can ask to:

• get a copy of what is held about you (access);
• have it corrected (rectification);
• have it deleted (erasure);
• have its use paused while a dispute is sorted out (restriction);
• object to it being used;
• receive it in a portable, machine readable form (portability);
• withdraw your consent at any time, which does not affect anything done before you withdrew it.

Email yarra.alhamoud@gmail.com and you will get a reply within 30 days. Deletion is honoured, not negotiated. You can also complain directly to me first, and I would rather you did.

If that does not resolve it: in the UK, the Information Commissioner's Office. In the EU, your national data protection authority. In Saudi Arabia, the Saudi Data and Artificial Intelligence Authority (SDAIA).

Children

This site is not directed at children under 16, and their details are not knowingly collected. If you believe a child has submitted an email address, contact the address above and it will be removed.

Changes

If this policy changes, the date at the top changes with it. Material changes affecting people already on the waitlist will be communicated by email.