Privacy
This version describes the current prelaunch website. Details of the hosting provider, specific processing countries, retention periods and legal safeguards for analytics and international transfers are still under review.
Find out what data is processed when you visit faymor, join a waiting list or contact us. This notice covers the landing pages and waiting lists, not the future features of the platform.
For privacy enquiries or to leave the waiting list: hello@faymor.com
Who is responsible
The controller for this service is minddraft AG, Säntisstrasse 12, 6345 Neuheim, Switzerland. You can contact us at the email address above or by post.
Your interest in faymor
The fan waiting list requires your email address. The creator waiting list also collects your social-media handle, selected channel and the focus of the creator page you visited. We additionally store an internal identifier, signup time and a language hint from your browser. The form does not ask for your name, follower count or country. We use this information to manage interest, avoid duplicate entries and send news about faymor and its launch. For creators, this also includes discussing potential collaboration. Joining is voluntary, does not create a user account and involves no purchase obligation.
Recommending faymor
After a new fan signup, you receive a link with a randomly generated referral code. The link contains neither your name nor your email address; internally, its code is associated with your waiting-list entry. If someone signs up through that link, we store a connection between the two entries to attribute the referral. A visit alone does not create that connection. Other visitors cannot use it to access your entry. Share the link only where you want this attribution. Signing up without a referral code is equally possible.
Messages and personal enquiries
If you reply by email or through a social-media channel, we process your sender details and message to handle your enquiry. The respective social-media service also processes data under its own privacy information.
Operation and security
The website and waiting-list data are hosted in Europe. The specific infrastructure provider and hosting countries remain to be added. Requests involve technical data, notably your IP address, request time, requested address and browser information, to deliver and secure the website. The hosting provider's access-logging and retention practices still need confirmation. To prevent abuse, the waiting-list form limits signups per IP address. It stores a derived hash rather than the IP itself, with a counter that expires after one hour. This hash is not equivalent to fully anonymous data. The live website should only be accessed over HTTPS.
Email delivery
Mandrill (Mailchimp Transactional, The Rocket Science Group LLC, USA) is planned for the test phase. Brevo (Sendinblue SAS, France) is planned for subsequent delivery. These services process recipient addresses, message contents and technical delivery information when sending mail. Mandrill processes data in the USA. Brevo states that its databases are hosted in the EU; this does not categorically exclude other processing by subprocessors. Applicable contractual safeguards, recipient countries and open or click tracking settings must be confirmed before the respective delivery starts. Email processing is therefore not represented as exclusively European.
Usage analytics by minddraft
The website includes minddraft's own tracker (Wayfold). The current configuration collects page views, timing, scroll depth, form-submission events, device-size categories and referral or campaign information. Heatmaps with grid-based click and pointer positions, repeated or ineffective click indicators and technical performance metrics are also enabled. These help us understand usage and usability issues. The loaded analytics script uses a random identifier for the open document and does not read form-field values for submission measurement. Requests go to md-forge-frontend-app-stage1.minddraft.com. Technical connection data is also involved, so we do not describe all processing as anonymous. Tracking is currently configured without a prior consent prompt and respects the Global Privacy Control browser signal. The permissibility of this configuration for every enabled feature, server-side processing and deletion periods still require review before public use.
Cookies and browser storage
A CSRF session cookie protects the form. The website may also remember language and appearance choices in cookies. A traffic-source hint from campaign parameters, a referral link or the referring website is stored in the tab's session storage under sway:traffic-src. The tracker is configured without analytics cookies. However, it may remember an explicit analytics preference in local browser storage for up to 180 days. You can delete or block cookies and local data through your browser settings; this may affect some functionality. Pointer position or, where supported and permitted, device tilt is also processed locally for the moving hero background. That background feature does not send sensor data to our server; the heatmap measurement described above is separate.
Fonts from Google
The landing pages load Manrope through Google Fonts. Your browser connects to Google servers, transmitting your IP address and technical request information, among other data. Processing in the USA is possible. Assessment of this external integration and the transfer basis remains part of the outstanding review.
Legal framework
The Swiss Federal Act on Data Protection (FADP) and, where applicable, the GDPR apply. Voluntarily requested updates rely on consent (GDPR Article 6(1)(a)). Requested precontractual steps may rely on paragraph (b), and necessary security measures on paragraph (f). Analytics, browser storage and international transfers require separate assessment; joining a waiting list does not constitute blanket consent to them.
Retention and recipients
Waiting-list entries and referral associations are held in our database; automatic expiry is not currently configured for these entries. You can request removal, correction or deletion through the contact above. Data no longer required must be deleted unless legal obligations or legitimate evidential purposes require retention. A specific review and deletion schedule, and backup and analytics retention periods, remain to be defined. Relevant minddraft personnel and providers involved in operation or delivery need access. Processing in countries without adequate data protection requires appropriate safeguards or a statutory exception. The applicable basis for the providers actually used remains to be confirmed.
Your rights and withdrawal
Subject to applicable law, you may request access, correction, erasure, restriction and a copy or transfer of your data, and object to processing. You can withdraw consent for the future, particularly for waiting-list updates, by writing to the contact above. In Switzerland, you can contact the Federal Data Protection and Information Commissioner (FDPIC). Where the GDPR applies, you also have the right to complain to a competent data protection authority, particularly in your country of habitual residence.
Last updated: 15 September 2026 · Version for review