apoplan.com

Privacy notice

Version 2 · October 2026

Who is responsible

ApoWise (a Danish company under formation; until it is registered, the data controller is its founder, Kasper Krommes), Copenhagen, Denmark. Contact: [email protected].

What this website stores

Almost nothing. The site has no analytics, no advertising, no tracking pixels and no third-party fonts. The only third-party script is Cloudflare Turnstile, and only on the page with the waiting-list form (see below). It sets no cookies on the public pages.

• Waiting list. If you join, we store your email address, the language you chose, the date and time, and the fact that you ticked the consent box. Nothing else. Legal basis: your consent (GDPR Article 6(1)(a)). Purpose: to send you one email when ApoPlan opens for testing with families and one when it is released. We keep the address until twelve months after release, or until you ask us to remove it, whichever comes first. We do not share it with anyone.
• Invited testers. If you enter the tester area with an access code, the site sets one cookie (apoplan_tester) so that you do not have to enter the code again for 30 days. The cookie holds no personal data — only a signed expiry time. Everything you enter in the test version of the assessment stays in your own browser; it is not sent to us.
• Server logs and abuse protection. Our hosting provider, Cloudflare, processes connection data (such as your IP address) to deliver the site and protect it from abuse. For the waiting-list form and the tester door we also keep a one-hour count of attempts per connection, stored only as a hashed value, to limit automated misuse.
• Security check (Cloudflare Turnstile). The waiting-list form uses Cloudflare Turnstile to tell people from automated programs, usually without you having to do anything. To do that, Cloudflare processes technical information from your browser and connection (such as your IP address and browser characteristics) for this check only; it is not used for advertising or tracking. Legal basis: our legitimate interest in protecting the forms against misuse (GDPR Article 6(1)(f)).

Where the data is kept

The waiting list is stored in our own account with Cloudflare, Inc. (hosting and storage), who act as our data processor under their standard data-processing terms. Cloudflare may process data outside the EU/EEA under the EU–US Data Privacy Framework and the EU standard contractual clauses.

Your rights

You can ask to see what we hold about you, have it corrected or deleted, withdraw your consent, or object — write to [email protected]. Withdrawing consent removes you from the waiting list; it does not affect anything done before. You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

Children

The waiting list is for adults. If you are under 18, please ask a parent to join on your behalf.

Changes

If this notice changes, the new version is published here with a new version number and date.