Legal

Privacy

Last updated July 31, 2026

This page covers memorycastle.me — the site you’re reading right now, where the only thing you can do is read the story and join the waitlist. It doesn’t cover the Memory Castle product itself, which will get its own notice before the alpha opens.

What we collect

If you join the waitlist, we collect the one email address you type into the form. That’s the entire account we hold on you — there’s no name, no password, no profile.

Separately, every visitor generates a small number of anonymous analytics events, sent through Google Tag Manager to Google Analytics (GA4):

• Page views — which pages of the site (and the sample chapter) get read.
• book_opened — when the “Look inside” ribbon is clicked.
• waitlist_joined — when the waitlist form is submitted successfully, plus which part of the page it was submitted from (the buy box, the ribbon, or the back cover).

The email address you type into the waitlist form is never included in any analytics event. It travels once, directly to our API, and nowhere else.

Where it lives

Waitlist signups are stored in a PostgreSQL database that we run ourselves, on our own hardware — not a third-party managed database service. There is no cloud data warehouse copy.

Who else sees it

We use two outside services to run this site, and each sees a different, narrow slice:

• Klaviyo, our email service provider — receives your email address only, so we can send you waitlist and alpha-launch updates. It never receives anything else about you; there is no Memory Castle content, no analytics data, and no browsing history in that handoff.
• Google Analytics, via Google Tag Manager — receives the anonymous interaction events listed above. It never receives your email address.

Your email address is protected

Joining the waitlist always shows the same confirmation, whether you’re a brand-new signup or already on the list. That’s deliberate: it means no one — including us, through the public form itself — can use this site to check whether a particular email address has joined. On a site built around your becoming, we don’t want the waitlist itself to leak who’s on it.

Keeping the form honest

We also limit how many waitlist requests can come from the same network address in a short window, to keep the list honest and the form resistant to abuse. This limit is about the number of attempts, not about whether you’re on the list — see above.

How long we keep it

We keep waitlist entries until the alpha launches or you ask us to remove yours, whichever comes first — there is no automatic deletion timer today. We do not sell your email address, to Klaviyo, to anyone else, or for any other purpose. Not ever.

Cookies

This site sets cookies through Google Tag Manager and Google Analytics to measure the usage described above. We don’t run advertising pixels, and we don’t sell or share your information for advertising. Our analytics tool (Google Analytics) connects to Google-operated measurement endpoints; we keep its advertising features (ads personalization / Google Signals) turned off.

Export and erasure

You can ask us to send you a copy of the email address we hold for you, or to remove it entirely, at any time. There is no self-service export or delete button on this site yet — every request is handled by hand, by a person, using the contact address below. We aim to act on it promptly.

Contact

Founder review pending: the contact address for privacy questions, export requests, and erasure requests goes here before this page ships. Until then, this is a visible placeholder, not a working inbox — [email protected] .