Privacy Policy — WatchDive Pre-Launch

1. Who we are

• Company: DIVEROID LTD (brand: DIVEROID)
• Representative: Jay Kim
• Registered office: Office 12146, 182-184 High Street North, East Ham, London, United Kingdom, E6 2JA
• Company no.: 16343651
• Privacy contact: help@diveroid.com

2. What we collect

• Email address (required) — to send the confirmation you request and, after you confirm, WatchDive launch updates.
• Phone number (optional) — only if you choose to receive a VIP SMS launch alert.
• Security signals — abuse flags and a short-lived, keyed network bucket used in server memory to limit automated or repeated requests. We do not retain the raw IP address, the network bucket, or the full browser user-agent in the lead record.
• Page measurement — device class (phone, tablet, or desktop), browser window size, page language, time zone, a coarse country code derived from the IP address by the hosting network, time on the page, how far you scrolled, how long each section was on screen, and named clicks such as a signup button, with their approximate position on the screen. It also records the referring site's domain and the campaign tags in the link (source, medium, and campaign), grouped under a random session identifier that is kept only in that browser tab. In the EU/EEA, the UK and Switzerland, or when we cannot tell your country, it runs only after you choose Allow; elsewhere it runs by default and you can turn it off with Cookie settings at the bottom of the page. This record does not contain your email address, phone number, IP address, full browser user-agent, the text you type, your precise location, or an inferred age or gender. When measurement is allowed, a page experiment stores its version for up to 30 days to keep return visits consistent and links the random session ID and experiment variant to a new signup, so we can compare saved and confirmed emails. The aggregate report contains no email addresses. When their identifiers are configured, Google Analytics 4, Google Ads, the Meta pixel, and Microsoft Clarity heatmaps follow the same rule. Our support chat and Vercel Web Analytics can load with the page. A coarse country code may be stored with your signup, separately from optional page measurement. It is derived from the IP address by the hosting network, together with the fact that the code came from that network and the time it was read. If that signal cannot be used, the country is stored as unknown. We do not retain the raw IP address with that country code.

Optional Google or Apple signup — if you choose it, we receive your provider account identifier, email address and email verification information. Apple may provide a private relay email address if you choose Hide My Email. We store your signup method, provider identifier and verification source with your waitlist record to recognize repeat signups and send the launch updates you requested. We do not receive your Google or Apple password. This signup does not give access to payment details or authorize a payment.

Optional price reservation — only if you choose it. Stripe hosted Checkout processes your card data and charges exactly USD $3 now. Our server stores payment identifiers, payment status, and the reservation terms that apply to that payment. We do not store the full card number, the card security code, or other full card details. A free email signup collects no payment details. The USD $3 fee is in addition to the product price and is not deducted from it. The paid reservation guarantees that you can buy the product for USD $149 at launch, whether or not you are among the public first 100. We charge USD $149 later only when you choose to buy, and we do not charge, schedule, or authorize it automatically. A coarse country code stored with a signup is separate from optional page measurement and is not a raw IP address.

3. Why we use it

We use the information you provide to:

• send a one-time link to confirm that you control the email address;
• send you a notification when WatchDive launches on Kickstarter;
• share early-bird pricing and launch-related updates;
• protect the form and our email delivery service from abuse;
• see which parts of the page are used, so we can improve it (after you allow measurement where Allow is required).

If you choose the optional price reservation, we use the payment identifiers, payment status, and reservation terms to administer that reservation. We will not use your information for unrelated purposes.

4. Legal basis

Submitting the form requests an operational confirmation email. Your waitlist registration and consent to launch updates are completed only after you use the confirmation link. Marketing and page-measurement cookies: in the EU/EEA, the UK and Switzerland, or when we cannot tell your country, they run only after you choose Allow (consent). Elsewhere they run by default, based on our legitimate interest in measuring our advertising, and you can opt out at any time with Cookie settings at the bottom of the page. Not now, or a browser Global Privacy Control signal, keeps them off everywhere. A short-lived country cookie records which of these rules applies. That cookie stores a coarse country code derived from the IP address by the hosting network, not the raw IP address. A language preference cookie is stored so the page stays in the language you chose. You can withdraw consent at any time (see Section 7).

5. Sharing and international transfer

We use processors to run this page: Stripe, which provides Stripe hosted Checkout for the optional USD $3 price reservation, Vercel for hosting and Web Analytics, Resend for confirmation and update email, Notion for waitlist records and, separately, page-measurement summaries, our own support chat, and Google and Meta only when those tags are enabled and measurement is on for you (see Section 4). An SMS provider is used only if you opt into a text alert. These providers may store data outside Korea, including in the United States. We share only what the service needs, and we never sell your personal information.

6. How long we keep it

We keep waitlist details until the WatchDive launch campaign ends, or until you ask us to delete them or unsubscribe, whichever comes first. Page-measurement summaries are kept for up to 12 months and then deleted. After a deletion request, we delete the matching records without undue delay. If you pay the optional reservation fee, we keep the payment identifiers, payment status, and the reservation terms for that payment only to administer the reservation and to meet applicable legal and accounting requirements.

7. Your rights

You can at any time:

• ask what information we hold about you;
• ask us to correct or delete it;
• unsubscribe from emails (via the link in any email we send) or SMS;
• withdraw your consent.

To exercise any of these rights, email help@diveroid.com.

8. Children

This page is not intended for children under 14, and we do not knowingly collect information from them.

9. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the effective date shown at the top.

10. Contact

Questions about your privacy? Email help@diveroid.com.

11. Buddy Invite

Buddy Invite is our friend invite program. Every waitlist record gets an invite code when it is created. While the program runs, we email your invite link and status page once you confirm your email, and we count the friends who join through your link. DIVEROID LTD (Section 1) is the controller. This section adds to the sections above while the program runs.

What we store for the program, with your waitlist record:

• Your invite code — an 8-character code created with your waitlist record and used in your invite link.
• Who invited you — if you joined through a friend's link, that friend's invite code, not their name or email address. The code from the link is also kept in your browser's local storage, so it can be added when you sign up.
• Nickname — only if you set one on your Buddy Invite status page.
• Your choices — whether your nickname is shown on the leaderboard and whether we email you when a friend joins.
• Counts and review status — how many confirmed friends are counted for you, the last count we emailed you and when, whether our team hid your nickname, and the status of any manual reward review.

Invited friends' records — to count invites and review rewards, we also use details already held in the waitlist records of people who joined through your link: whether and when they confirmed their email, their email address and its domain, signup time, page language, landing page, campaign tags and abuse flags. Email addresses are compared only on our server, to catch self-invites, repeat signups and disposable addresses.

We use this information to:

• count confirmed friends and apply the program rules, including the daily limit and the closing time;
• give the rewards you reach: the earlier launch email, the early-bird price link and prizes;
• review rewards for fraud, such as self-invites, repeat or disposable addresses and automated signups — review signals only flag a record, and a person decides before a reward is refused;
• send program emails: the invite guide and, unless you turn them off, an email when a friend joins.

Who sees what — your counts are shown only to you: on your status page, opened from the signed link in our emails, and in program emails. They show how many friends counted, never who they are. The public top 3 leaderboard shows each place's rank and friend count, with a nickname only if that person set one, chose to show it and our team has not hidden it; otherwise it shows "Private diver". Email addresses are never shown.

Prize winners — if you win a prize that has to be shipped (an underwater light or a WatchDive), we ask you by email for the details needed to deliver it: your name, shipping address and phone number. Where Korean withholding tax applies to a prize, we also collect the identification details the law requires for that tax and use them only to withhold and report it. We give shipping details only to the delivery service that ships the prize, and tax details only to the tax authority where the law requires it.

Legal basis — under the GDPR and UK GDPR, we count invites, give rewards and send program emails to carry out the program rules you take part in (contract). Recording who invited you and reviewing invites and rewards for fraud rely on our legitimate interest in running a fair program. Your nickname is shown only if you choose it (consent), and you can withdraw that choice on your status page at any time. We process tax identification details to meet a legal obligation. Under Korea's Personal Information Protection Act (PIPA), we process program data and prize shipping details as necessary to run the program and deliver the prize you claim, and tax identification details only where a law requires it.

Where it is kept — Buddy Invite data is kept with your waitlist record in Notion, program emails are sent through Resend, and the pages run on Vercel: the processors listed in Section 5. We never sell it.

How long we keep it — we keep Buddy Invite data until the program has closed and every reward has been delivered, then delete or anonymise it. Prize shipping details are kept only for that delivery. Tax records are kept only as long as the law requires, then deleted. If you ask us to delete your waitlist record sooner, your Buddy Invite data is deleted with it.

Your choices and rights — you can change your nickname, leaderboard choice and friend-joined emails at any time on your status page. The rights in Section 7 apply to Buddy Invite data too. To use them, or with questions about the program, email help@diveroid.com.