Privacy Policy

Last updated: August 22, 2026

This privacy policy explains how STAR GAZE d.o.o. ("we", "us", "our"), operating the GazeHome website at www.gazehome.com, collects, uses, and protects personal data.

1. Data controller

STAR GAZE d.o.o. is the data controller responsible for the processing of your personal data as described in this policy.

2. What data we collect

We collect personal data only when you voluntarily provide it through our website. This includes:

• Early access waitlist: name, email address, selected role, country (optional), and communication preferences
• Contact form submissions: name, email address, and message content
• Operational correspondence: data shared via our published email addresses (info@gazehome.com, support@gazehome.com)
• Browser locale and language: detected automatically to serve the correct language
• UTM campaign parameters: captured from URL if present
• Cookie consent preference: stored locally in your browser

We do not store full IP addresses. See section 7 (Cookies and tracking technologies) below.

3. Purposes of processing

We use the data you provide for the following purposes:

• Processing and managing your early-access waitlist registration
• Sending launch notifications when you have opted in to receive them
• Sending product updates and news when you have opted in to receive them
• Responding to your enquiries and correspondence
• Understanding which user roles are interested in the platform (in aggregate) to inform product development

4. Lawful basis for processing

We process your personal data on the following lawful bases under Article 6(1) of the GDPR:

• Consent (Art. 6(1)(a)): For sending launch notifications and product updates. You provide this consent explicitly when submitting the waitlist form and selecting your communication preferences. You may withdraw consent at any time by contacting us or using the unsubscribe mechanism in any email we send.
• Legitimate interest (Art. 6(1)(f)): For processing waitlist registrations and managing correspondence. Our legitimate interest is in operating and developing the GazeHome platform and responding to enquiries from interested users. We have assessed that this processing does not override your rights and freedoms given the limited and expected nature of the data involved.

5. Recipients and processors

Your personal data may be shared with the following categories of recipients, who process data on our behalf or as part of the services we use:

• Supabase: Our database hosting provider. Waitlist data is stored securely in Supabase infrastructure. Supabase processes this data on our behalf.
• Vercel: Our website hosting provider. Vercel serves the website and processes requests.
• Brevo (formerly Sendinblue): Our email service provider. Waitlist registrations are processed in Brevo for the purpose of sending launch notifications and product updates.
• Cloudflare (Turnstile): Our forms use Cloudflare Turnstile, a privacy-preserving challenge service, to protect against automated spam submissions. Turnstile processes minimal technical data necessary for bot detection. See section 7 below for further detail.
• Plausible Analytics: Our website analytics provider. See section 7 below.
• Google Workspace: Emails sent to our published addresses (info@gazehome.com and support@gazehome.com) are routed and processed through Google Workspace. These are operational inboxes managed by our team and are not used for marketing purposes.

We do not sell, rent, or otherwise share your personal data with any third party for their own independent purposes.

6. International data transfers

Some of our service providers may process or store data outside the European Economic Area (EEA). Where this occurs, we rely on applicable safeguards, including the service provider's adherence to relevant data protection frameworks, Standard Contractual Clauses (SCCs), or adequacy decisions, as applicable. If you have questions about specific transfer mechanisms, please contact us.

7. Cookies and local storage

This website sets no cookies. It stores three preferences in your browser using localStorage, listed below. These are not cookies and are never sent to our server. Analytics is optional: nothing is loaded and no analytics request is made until you allow it, and you can withdraw that permission at any time using “Manage privacy choices” in the footer of every page. If your browser sends a Do Not Track signal, analytics stays off regardless of any earlier choice.

• Analytics: With your permission we use Plausible Analytics, a privacy-focused, cookieless service. It is loaded only after you allow it and never before. Plausible does not use cookies, does not collect personal data, and does not track individual visitors. All analytics data is aggregated and anonymous. We do not use advertising cookies, persistent advertising identifiers, or cross-site profiling, and no data is shared with advertising networks.
• Spam protection: Our forms use Cloudflare Turnstile, a privacy-preserving challenge service. Turnstile does not use cookies for tracking purposes.
• Changing your mind: Your choice is stored only as the choice itself, a version number and a timestamp. It contains no name, account, session or IP address. Choosing “Use essential preferences only” does not limit any part of this website.

8. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Waitlist data: Until deletion request or 24 months after last interaction, whichever occurs first.
• Cookie preferences: 12 months, then re-prompted.
• Contact correspondence: Retained for a reasonable period to manage correspondence, then deleted unless required for legal reasons.
• Analytics data: 12 months rolling. Plausible retains only aggregated, anonymised data.

9. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): Request deletion of your personal data.
• Right to restriction (Art. 18): Request restriction of processing of your data in certain circumstances.
• Right to data portability (Art. 20): Request your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): Object to processing based on legitimate interest.
• Right to withdraw consent (Art. 7(3)): Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

10. Whether data provision is required

Providing your personal data to join the early access waitlist is voluntary. However, without your name and email address, we are unable to register you on the waitlist or send you launch notifications. Optional fields (such as country and role) help us understand our audience but are not required.

11. Automated decision-making

We do not use automated decision-making or profiling as defined by Article 22 of the GDPR in connection with this website. No decisions with legal or similarly significant effects are made about you based solely on automated processing.

12. How to exercise your rights

To exercise any of your rights, please contact us at support@gazehome.com. Include enough information for us to verify your identity and specify which right you wish to exercise. We aim to respond to all requests within one calendar month. If a request is complex or we receive a high volume of requests, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.

13. Right to lodge a complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for STAR GAZE d.o.o. is:

You may also lodge a complaint with the supervisory authority in the EU/EEA member state of your habitual residence or place of work.

14. Children

GazeHome is not directed at anyone under 16. We do not knowingly collect data from children under 16.

15. Changes to this policy

This policy may be updated before it becomes effective. The "last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically. Material changes will be communicated through appropriate means where feasible.