Legal
Privacy policy
Last updated 20 October 2026
What we collect
When you join the waitlist we store the email address you enter and, if you choose to give it, your hotel’s name, together with the time you signed up. The form asks for nothing else.
Why, and on what legal basis
We use these details only to tell you when Kudetu opens and to follow up about the launch. The legal basis is your consent, which you give with the checkbox on the form (Article 6(1)(a) GDPR). You can withdraw it at any time.
Where it is stored and who receives it
Waitlist entries are stored in a self-hosted database (waitlist.kudetu.com), not in a third-party mailing service. We do not sell or share them. To keep out spam bots, the form uses Cloudflare Turnstile, which checks browser and device signals when you submit. Traffic to the site passes through Cloudflare, and the page loads fonts from Google Fonts and styling from the Tailwind CSS CDN; like any web request, these services receive your IP address.
How long we keep it
Your details are kept until you ask us to delete them or withdraw your consent, or until the waitlist is no longer needed after launch. They are then deleted.
Visitor statistics
We count visits with Umami, which runs on a self-hosted server (analytics.aivent.se) rather than a third-party analytics service. It sets no cookies, stores no IP addresses and does not identify individual visitors; we only see aggregated figures such as page views.
Your rights
You have the right to know what information we hold about you, to have it corrected or deleted, to restrict processing, to receive it in a machine-readable format and to withdraw your consent. You can also complain to your data protection authority; in Sweden that is the Swedish Authority for Privacy Protection (imy.se).