Effective October 31, 2026, 12:55 a.m. Eastern Time.
ROGUE DSP Waitlist Privacy Notice
Effective on publication. The current legal page records when this version took effect.
Fluxcode Studio LLC, an Ohio company at 5240 Parkmoor Drive, Westerville, OH 43082, USA, runs the ROGUE DSP waitlist and decides how its information is used. This notice covers joining, confirming, checking or leaving the list, referrals, related waitlist email and privacy requests. Joining creates no account. Apart from one email when the ROGUE DSP store opens to the public, it does not subscribe you to marketing or to mail from another Fluxcode business.
Contact [email protected] or use our privacy rights page without an account. Help is available at [email protected] and general questions at [email protected].
What we collect and why
- Email, your adult-age and Terms statement, form/document versions, first browser-language tag and signup/confirmation/leave history: Keep your requested place, send the stated messages and record your choices.
- Referral codes and linked signup references, credit and review history: Calculate optional referral credit and prevent duplicate or false credit.
- Campaign tags and approximate country, when a trustworthy country code is available: Understand signup sources in grouped reports. We may also use country to leave out of the store-opening email places where the store does not sell. We may tell a maker how many people joined through their link, never who. Country is a connection estimate; VPNs and travel can make it wrong.
- Keyed connection, network, browser/language and email-domain fingerprints; blocked-attempt records: Limit abuse of forms and other people's inboxes. The network fingerprint also decides whether the confirmation email's button can finish confirming without a second press. A fingerprint is a code made with a secret key, still personal information.
- Your messages, requests, proportionate identity checks, replies and handling records: Help you and fulfil privacy requests.
- Message copies, delivery/bounce/complaint records, minimal do-not-contact entries, staff activity and security records: Deliver requested mail, respect choices, protect the service and account for our actions.
Email and the required adult-age/Terms statement are needed to join. Referrals are optional. We do not request a birth date, payment details, precise location or your contacts. Please avoid sending sensitive information or other people's details.
Our signup record uses country and short-lived connection fingerprints rather than storing your raw IP address. Network and hosting services still handle connection information to deliver the site. Their logs are separate from the signup record. Fingerprints are for abuse checks and that confirmation step, not following you across websites.
Where required, our legal bases are providing the waitlist you request, legal duties for rights requests and required records, and legitimate interests in security, fair referrals, grouped reporting and evidence of choices. The legal basis for each waitlist message depends on its purpose and the rules where you live. You may object to a legitimate-interest use. If we later offer marketing, its separate notice will state the applicable basis and withdrawal method. Withdrawal does not undo earlier lawful processing.
Referrals and messages
A qualifying confirmed referral improves your calculated place by three positions while both people remain eligible. We show a range and count, not the referred person's identity. A person who shares with a small group might still infer who joined. Referrals can be held for human review; ask [email protected] to review a mistake. See the Terms for sharing rules and what leaving or deleting does to credit.
We send the confirmation and welcome messages you request, one reminder if you have not confirmed, a personal beta invitation if admitted, one email when the ROGUE DSP store opens to the public, necessary waitlist notices and replies to your requests. We cannot tell who typed an address, so that reminder can also reach someone who did not ask; ignoring it still leaves the address off the list, and the cancel link stops it. The store-opening email says the store is open, links to it and carries no offer. Welcome, beta invitation and store-opening emails follow your waitlist choices. This release does not offer a newsletter choice, enroll anyone in Sendy, or send newsletter mail. If we later offer ROGUE DSP product news, new plugins or occasional offers, we will first show a separate, unticked affirmative choice and publish any notice needed for that activity. It will not cover another Fluxcode business.
Use a waitlist email's leave link and page button to leave. You can also reply to that email or write to [email protected] or [email protected]. A visible sender address or message header is not proof of identity, so before an emailed request changes a list or reveals information we check it with the confirmed signup address. A plain-text message saying only STOP, UNSUBSCRIBE or REMOVE ME, or a plain-text privacy request, normally gets a one-use link at that address automatically and pauses mail to it for up to 7 days. Any other message goes to a person, who answers within applicable legal deadlines. It does not pause mail by itself. No account, password or payment is needed. Once you leave, waitlist mail stops. A reply needed to fulfil your privacy request may still be sent. Deleting information is a separate request.
Who receives information
People working for Fluxcode may access information when needed for these purposes. Cloudflare handles website traffic and also stores our encrypted off-site backups in R2; Hetzner hosts the site and a self-hosted Sendy installation that this release does not use; Google Workspace receives mail sent to our published addresses. Where enabled for the release, a ROGUE-only Cloudflare mail route receives a copy of messages delivered to those ROGUE addresses and passes it to a restricted ROGUE service for automatic request handling; Google Workspace continues to receive the original message. That route identifies the delivered ROGUE address from delivery information, not visible message headers. Services that send requested messages receive the information needed for that job. Email services receive addresses and message content; network services can handle connection details, forms and private link codes; backups can contain copies of records. Confidential professional advisers may receive relevant records, and disclosure may be required by law or to establish, exercise or defend a legal claim.
The waitlist-only service integration list below reflects the services active when this version is published. Website, hosting, mail and backup infrastructure are described above.
- Resend — transactional email receives your contact details, under a data processing agreement.
Fluxcode does not sell this information, share it for cross-context behavioural advertising, use it for targeted advertising or use submitted information to train machine-learning models. That last commitment concerns Fluxcode; it does not replace a provider's own terms.
How long we keep it
These are our retention rules. A specific legal duty, active claim or legal hold can require a particular record longer; we restrict its use and review the need. Provider logs and backup copies have separate lifetimes.
- Unconfirmed request: 90 days after the latest confirmation email, capped at 180 days from the initial join request.
- Confirmed signup and consent history: While you stay; delete within six months after the waitlist closes, subject to the minimal records below.
- Left, cancelled or removed signup: Remove country/campaign attribution immediately; delete the remaining signup and consent history after 24 months, or sooner for a valid deletion request.
- Earned referral: While both linked signups are retained; deletion of either removes it. Other referral records last 24 months from creation.
- Form fingerprints and abuse records: 30 days; signup fingerprints use the latest confirmation request as their starting point.
- Routine support conversation: 24 months after closure. A matter closes 30 days after the last substantive exchange unless resolved earlier; a substantive reply reopens it. Agreements, accounting, disputes and legal holds use separate restricted schedules.
- Prepared message records: 24 months from preparation for the sending queue, subject to a valid deletion request.
- Minimal do-not-contact and recovery entries: Voluntary leave entries last while the waitlist sends mail. Bounce, complaint and deletion-objection entries last while any ROGUE email service could contact you, then are reviewed/deleted. Lifted entries are deleted 12 months later.
- Privacy-request cases; pseudonymous staff activity: Six years after case closure; seven years from activity entry.
- Masked errors; browser security-report counts: 30 days for errors; 90 days after the latest report added to a count.
- Emailed-request records (a keyed code for the sender, which of our addresses was reached, when, and how the message was classed): No automatic deletion runs for these yet, so a person removes them: within 24 months of receipt, or sooner for a valid deletion request.
- Person-link record (a keyed code that ties your records together): Until nothing links to it and it is at least 24 months old.
Rejoining is not currently available. If offered later, replacing a voluntary leave will require fresh confirmation and will not automatically override a complaint or deletion objection. Deleted information can remain in expiring backups. Our recovery rules require mail to stay paused until leave, deletion and objection records have been reapplied and checked. This release creates no newsletter preference record.
Your choices and rights
Ask for access, a portable copy, correction, deletion, restriction or an objection through the rights page or [email protected]. We offer these routes wherever you live, alongside rights applicable law gives you. We do not penalise a request; deleting a signup necessarily ends its place and linked referral benefits.
We check requests proportionately before disclosing or changing information. A straightforward request we have checked can be handled automatically. If it is linked to an account, creator relationship, payment, dispute or legal hold, or we cannot establish who is asking, a person reviews the relevant part before release or deletion. If you lost access to the signup inbox or act for someone else, contact us for an alternative check. Knowing an address alone does not entitle someone to its information. We explain any permitted exception and retain only justified records.
We respond within applicable legal deadlines, measured from receipt as the law requires. Identity checks do not restart them. We explain any permitted extension or refusal. You can ask for review or use an applicable appeal route, and may complain to your privacy regulator without contacting us first. Direct-marketing objections stop that marketing.
This waitlist is for adults aged 18 or older, or the higher age needed to agree to the Terms where you live. Report a suspected underage signup to [email protected]. We investigate proportionately and remove an established underage signup, keeping only justified minimal records.
Changes and contact
Creating a new Fluxcode subsidiary does not automatically transfer your data or permission to email. A lawful handover of this same service must preserve your choices and commitments, with at least 30 days' notice and any required choice. Common ownership gives another Fluxcode business no permission to use the list. Departed members' records need separate lawful treatment; they are not a marketing list for a successor.
Material changes follow the advance-notice and cancellation process in the Terms. Staying never creates permission for new marketing. Contact [email protected] for questions, an accessible copy or information about a retained record. The Storage Notice explains browser storage and private links.