Privacy Policy

Last updated October 7, 2026

This Privacy Policy explains how Sergio Arranz González ("we", "us", "our") processes your personal data when you use the Warnbird website and submit one of its forms (the "Services").

Data controller: Sergio Arranz González
Address: Calle de los Frailes, 20, 28770 Colmenar Viejo, Madrid, Spain
Contact: privacy@warnbird.dev

Summary of key points

What we collect. On the waitlist form: your email address and, if you choose to add it, your website URL. On the agencies form: your work email and, if you provide them, your name, company, number of sites and message.
Why. To email you when Warnbird launches, or to contact you about an agency plan, depending on the form you used.
Legal basis. Your consent, which you can withdraw at any time.
Who receives it. Loops, our email provider, acting as data processor. Your data may be transferred to the United States.
Your website URL. We delete it if the site has not been verified within 30 days of launch.
Cookies. None. This site sets no cookies and runs no analytics.
Your rights. Access, rectification, erasure, objection, restriction and portability, by writing to privacy@warnbird.dev.

1. What information do we collect?

Personal information you disclose to us

We only collect the personal data you type into our forms.

Waitlist form:

Email address (required).
Website URL (optional). A URL can identify you if it is your personal site.

Agencies and companies form:

Work email address (required).
Name, company, number of sites you manage and your message (all optional). Please do not include personal data about other people in the message.

On both forms we also record your consent: that you accepted this policy and agreed to be contacted, and when you did so.

We do not ask for, and do not want, any special-category or sensitive data.

Information automatically collected

Like any website, the servers that deliver this site record technical request data, such as IP address, browser user agent, requested page and time of the request. These logs are kept by our hosting provider and are used only to operate and secure the site. We do not use them to build profiles or to identify you.

Website scans

Warnbird has not launched yet, and we do not scan any website before launch. After launch we will only scan a site once its owner has verified control of it. Submitting a URL on the waitlist form does not, on its own, cause us to scan it.

2. How do we process your information?

We use your data for one of two purposes, depending on the form you submitted:

Waitlist: to tell you about the launch. We email you when Warnbird is available. If you added your website URL, we keep it so that its first check is ready for you to start once you verify the site.
Agencies and companies: to contact you about an agency plan. We use the details you sent to reply to you and discuss what you need.

In both cases we also process data:

To keep a record of your consent, as the law requires us to be able to show it.
To operate and secure the site, through the server logs described above.

We do not sell your data, use it for advertising, or make automated decisions about you.

3. What legal bases do we rely on?

Under the General Data Protection Regulation (GDPR) and the UK GDPR, we rely on the following legal bases:

Consent (Article 6(1)(a) GDPR) for everything you submit through our forms. You give it by ticking the box on the form, which is never ticked in advance, and it covers only the purpose stated on that form. You can withdraw it at any time, as described in section 10.
Legitimate interests (Article 6(1)(f) GDPR) for server logs: our interest in keeping the site available and secure.

We share personal data only with the service providers that process it on our behalf, under a contract that limits what they can do with it:

Loops (email delivery and contact list): everything you submit through our forms, and your consent record.
Vercel Inc. (website hosting): server logs.

We may also disclose data where the law requires it, or to a successor in the event of a merger, acquisition or sale of the business, in which case this policy continues to apply to your data.

5. Do we use cookies and other tracking technologies?

No. This site does not set cookies, does not use local storage to identify you, and does not load analytics, advertising or social media trackers. That is why there is no cookie banner.

6. Is your information transferred internationally?

Yes. Our providers are based in the United States, so your data may be transferred to, stored and processed there. These transfers rely on the safeguards recognised by the GDPR, such as the provider's certification under the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. You can ask us for more information about these safeguards at privacy@warnbird.dev.

7. How long do we keep your information?

Waitlist email address: until you withdraw your consent, unsubscribe or ask us to delete it.
Website URL: if the site has not been verified within 30 days of launch, we delete the URL. You can also ask us to delete it at any time before that.
Agency enquiries: for as long as the conversation about an agency plan is open, and until you withdraw your consent or ask us to delete them.
Server logs: kept by our hosting provider for a limited period and then deleted.

After deletion we may keep the minimum record needed to show that we handled your request, for as long as the law allows claims to be brought.

8. How do we keep your information safe?

We apply reasonable technical and organisational measures: the site is served only over HTTPS, and access to the contact list is restricted. No system is completely secure, so we cannot guarantee absolute security. If a breach affecting your data occurs, we will notify you and the competent authority where the law requires it.

9. Do we collect information from minors?

No. The Services are not directed to anyone under 18, and we do not knowingly collect their data. If you believe a minor has sent us personal data, write to privacy@warnbird.dev and we will delete it.

10. What are your privacy rights?

You have the right to:

Access the personal data we hold about you.
Rectify data that is inaccurate or incomplete.
Erase your data.
Object to processing based on our legitimate interests.
Restrict how we process your data.
Port your data, receiving it in a structured, commonly used format.
Withdraw your consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, write to privacy@warnbird.dev from the email address you signed up with. We will answer within one month. You can also unsubscribe at any time using the link in every email we send.

If you believe we have handled your data unlawfully, you can lodge a complaint with your local data protection authority. In Spain this is the Agencia Española de Protección de Datos (www.aepd.es).

11. Controls for Do-Not-Track features

Some browsers send a Do-Not-Track signal. Because we do not track you across pages or sites, there is nothing for the signal to switch off, and the site behaves the same way whether or not it is set.

12. Do United States residents have specific privacy rights?

Depending on the state you live in, you may have rights to know, access, correct and delete the personal information we hold about you. We do not sell personal information and do not share it for targeted advertising. You can exercise these rights in the way described in section 10.

13. Do we make updates to this notice?

Yes, when the Services or the law change. The date at the top shows the current version. If a change affects how we use data you have already given us, we will tell you by email before it takes effect.

14. How can you contact us about this notice?

Write to privacy@warnbird.dev, or by post to Sergio Arranz González, Calle de los Frailes, 20, 28770 Colmenar Viejo, Madrid, Spain.

15. How can you review, update or delete the data we collect from you?

Email privacy@warnbird.dev from the address you signed up with and tell us what you need: a copy of your data, a correction, or its deletion. We will act on it within one month.