Privacy policy

Last updated 28 October 2026

Short version

We collect what's needed to run your waitlists and bill you, we don't sell or share it for advertising, and you can delete it any time.

If you have a Cloud account

• Account: your email address and a salted hash of your password.
• Billing: your plan, subscription status and Polar customer ID. Card and address details are held by Polar, not by us.
• Usage: how many waitlists, signups and emails your account has, to apply plan limits.

If you joined someone's waitlist

The waitlist's owner is responsible for that list, and we process it on their behalf. For each signup Lobby stores the email address, the page and referrer it came from, UTM tags, referral details, consent version and timestamps. IP addresses are kept only as keyed hashes and cleared after 30 days. Public waitlist pages set no cookies. Every email has an unsubscribe link, and the owner can delete you from their list; contact them, or us, to have that done.

Who processes data for us

• Polar (polar.sh): payments and invoicing, as merchant of record.
• Resend (resend.com): delivering emails.
• Hostinger (hostinger.com): the server Lobby Cloud runs on.

Cookies

The dashboard uses one cookie to keep you signed in. There are no analytics or advertising cookies.

Keeping and deleting data

Data stays until you delete it. Deleting a waitlist deletes its signups; deleting your account (Plan and billing, Delete account) deletes everything in it. Backups roll over within 30 days. Polar keeps billing records as tax law requires.

Contact

For access, correction or deletion requests, open an issue at github.com/rohansx/lobby and we'll reply privately.