Privacy

Privacy, in plain language.

Last updated: 31 July 2026

We build a product whose whole point is that your life stays yours. It would be strange to run a website that quietly did the opposite. So this one is built to the same standard, and this page tells you exactly what happens to anything you give us. No dark corners, no legalese you are meant to skim.

The short version

This website sets no tracking cookies and runs no third-party analytics. Nothing here follows you around.
The fonts, styles, and scripts all load from this site alone. No outside servers see your visit.
If you request access, we collect only your email, your country, and the one line you write. We use it to email you about access. Nothing else.
We never sell, rent, or share your details for anyone else's marketing. Ever.
You can ask us to delete everything we hold about you, at any time, and we will.

Who we are

Molu is a small, early-stage project. If you have any question about your privacy or your data, write to hello@molu.io and a person will answer. For the data we collect through this site, we are the data controller under the EU General Data Protection Regulation (GDPR).

What this website does, and does not, collect

Simply reading these pages puts nothing on you. There is no analytics beacon, no advertising pixel, no fingerprinting, and no cookie banner because there is nothing to consent to. Your browser loads the page and its fonts from us and talks to no one else.

The one place you can choose to give us something is the request-access form. If you fill it in, we receive:

Your email address, so we can confirm it is really you and write to you when a place opens.
Your country, so we know which of your household's agreements she could help with first.
One line about why, so we understand who is drawn to this and can open access thoughtfully.

Our server also records the rough time of your request. We do not ask for, or want, anything more.

Double opt-in: nothing without your click

When you submit the form, we send one email with a single confirmation link. You are not on any list until you click it. If you never click, we discard the unconfirmed request. This is called double opt-in, and it means you are only ever on a list you actively chose.

Why we are allowed to hold it (legal basis)

Your consent, given when you confirm your address, is the legal basis under GDPR Article 6(1)(a). Because consent is the basis, you can withdraw it whenever you like, and doing so is as easy as giving it: reply to any email from us, or write to hello@molu.io.

The few companies that help us run this

We keep the list of outside providers as short as we can. Right now it is two, and each only ever sees what it needs to do its job:

Cloudflare hosts this website and stores the waitlist. We keep the stored data in the European Union where the platform allows it.
Postmark (our transactional email provider) sends the confirmation email and, later, the note that a place has opened. It receives your email address for that sole purpose. Postmark is operated from the United States, so sending these emails involves a transfer of your address there; that transfer is covered by the provider's Standard Contractual Clauses.

Neither is allowed to use your details for anything but the task above. We do not use advertising networks, data brokers, or social-media tracking tools.

How long we keep it

We keep your details only while the waitlist is live and you want to be on it. If you ask to leave, we remove you promptly. If the project winds down, or if a place has opened and you have moved on to the product itself, we delete the waitlist entry. Unconfirmed requests are cleared out regularly.

Your rights

Under GDPR you can, at any time and free of charge, ask us to:

tell you what we hold about you, and give you a copy;
correct anything that is wrong;
delete it all (the right to be forgotten);
stop using it, or hand it to you in a portable form;
withdraw your consent, which stops all future emails.

Write to hello@molu.io and we will act on it, usually within a few days and always within the month the law allows. If you believe we have handled your data poorly, you may complain to your national data-protection authority; in Denmark that is Datatilsynet.

A note on the product itself

This policy covers the website and the waitlist. The product is a different matter, and a stricter one: molu runs on hardware you own, what she learns about your life stays on your own machine, and nothing leaves it without your explicit approval. When you are invited to use her, you will get the product's own privacy terms, which start from that architecture rather than from a promise.

Children

This site and the waitlist are meant for adults. We do not knowingly collect details from anyone under 16.

Changes to this page

If we change how any of this works, we will update this page and the date at the top. If a change materially affects people already on the waitlist, we will email them rather than rely on you noticing.

Contact

Questions, requests, or second thoughts: hello@molu.io.

Back to the start