REALM.

Privacy Policy

Last updated October 12, 2026

REALM is pre-launch. Today, the only personal information we intentionally collect is what you give us when you join the early-access waitlist. This policy explains what that is, why we hold it, and the rights you have under the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA), and other US state privacy laws.

Who we are

REALM is the controller of the personal information described here. You can reach us about anything in this policy at raban@itsrealm.com.

What we collect

  • Waitlist details: your email address, your name if you choose to give it, and the time you signed up.
  • Technical data: our hosting provider briefly processes standard request data such as IP address and browser type to deliver the site and protect it from abuse.
  • Aggregate analytics: we use Vercel Web Analytics, which counts page views without cookies and without identifying or tracking you across websites.

We do not collect sensitive personal information, and we do not buy data about you.

Why we use it, and our legal basis

  • To send you early-access invitations and occasional launch updates. Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.
  • To keep the site secure, prevent spam, and understand overall traffic. Legal basis: our legitimate interests (GDPR Art. 6(1)(f)).

We do not use your information for automated decision-making or profiling.

Cookies and local storage

We do not use advertising, tracking, or analytics cookies. The only thing we store in your browser is a single local-storage entry recording that you dismissed our privacy notice. It is strictly necessary to remember your choice, contains no personal information, and is never sent to us. Because we use no non-essential cookies, there is nothing for you to opt in to.

Who we share it with

We never sell your personal information, and we never share it for cross-context behavioral advertising, as those terms are defined under the CCPA. We only disclose it to service providers (processors) who handle it on our behalf under written agreements:

  • Vercel Inc. — website hosting, security, and cookieless analytics.
  • Neon — the database where the waitlist is stored.

We may also disclose information if required by law, or to protect our rights and users.

International transfers

Our providers may process data in the United States. Where personal information from the EEA, UK, or Switzerland is transferred, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep it

We keep waitlist details until you unsubscribe or ask us to delete them, and in any case no longer than 24 months after REALM's public launch. Technical logs are kept only briefly by our hosting provider for security purposes.

Your rights

If you are in the EEA, UK, or Switzerland, you have the right to access, correct, delete, restrict, or object to our use of your data, to receive it in a portable format, and to withdraw consent at any time without affecting earlier processing. You may also complain to your local data protection authority.

If you live in California or another US state with a privacy law, you have the right to know what personal information we collect, use, and disclose; to access, correct, and delete it; and to opt out of its sale, sharing, or use for targeted advertising — which we do not do. We honor Global Privacy Control signals, and we will never discriminate against you for exercising these rights. You may use an authorized agent to make a request on your behalf.

To make a request, email raban@itsrealm.com. We will verify your request using the email address on the waitlist and respond within 30 days (GDPR) or 45 days (CCPA). Every update email also includes a one-click unsubscribe link.

Children

REALM is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has joined the waitlist, contact us and we will delete it.

Security

Data is encrypted in transit and at rest by our providers, and access is limited to the people who need it. No system is perfectly secure, but we take reasonable measures to protect your information.

Changes to this policy

We will update this page as REALM develops, and change the date above when we do. If we make a material change to how we use waitlist data, we will tell you by email before it takes effect.

← Back to REALM