Privacy · updated 22 October 2026
Your email.
Almost nothing else.
We keep the least we can, delete it on a schedule, and let you erase all of it with one click. This page lists every single thing we hold about you, in plain words.
Our promises
- No trackers. No analytics, no advertising pixels, no session recording, no fingerprinting. Not now, not "just for launch".
- Nothing sold, ever. We don't sell, rent or trade your data, and we don't share it with anyone for advertising.
- One click deletes you. Every email we send has a link that erases your address from our list on the spot. No "are you sure" maze, no 30-day wait.
- Deleted on a schedule. Data we no longer need is removed automatically, every day, by our own code.
- The same rights for everyone. Wherever you live, you get the strongest protections we owe anyone.
What we keep
When you join the waitlist, this is the complete list. There is no name, no phone number, no location and no device profile.
- Your email addressTo confirm it's really you, hold your place and tell you when the alpha opens.Until you leave
- Your invite codeA random 7-letter code that marks your place and your invite link.Until you leave
- Who invited youTheir invite code, so they move up the list when you confirm.Until you leave
- Whether you have hardware to rent outOnly if you tick the box in the sign-up form: a yes, so we can tell you first when Cirrun Host opens. Nothing about the hardware itself.Until you leave
- Which button and which linkThe form you used (top of page, end of the story, the plan page) and, if the link you followed had a campaign tag like "reddit", that tag. Never who you are on that site. It tells us which parts of the site and which places work.Until you leave
- Three datesWhen you joined, when you confirmed and when we last emailed you. They set your place in line and the deletion clock.Until you leave
- A scrambled network addressA one-way, salted hash of your IP address, never the address itself, kept apart from your email. It stops one machine from flooding the list.1 hour
The prices on our GPU price index come from providers' public pages and contain no personal data.
Your browser
We set no cookies. If you arrive through someone's invite link or a tagged link, your browser holds that code or tag for that tab only, so they still get credit if you look around before joining. It is erased when you close the tab and never leaves your device until you join.
Our fonts and code are served from cirrun.com itself, so loading a page doesn't tell Google or anyone else that you visited.
The site runs on Cloudflare's network. If it is under attack, Cloudflare may set a short-lived security cookie to tell people from bots. That cookie is only for security and isn't used to track you.
Why we're allowed to
Privacy laws such as the GDPR ask us to name a legal reason for each use. Ours:
- Your consentFor your email and everything tied to it. You give it by joining and clicking the confirmation link, and you take it back by clicking "Remove me" in any email.
- Keeping the service safeFor the scrambled network address. Without it, one script could fill the list with fake sign-ups and push real people down. It lasts one hour.
Who helps us
Two companies process data for us. They may only use it to provide their service to us, under data processing terms that bind them to protect it.
- CloudflareRuns the website and stores the waitlist, in its Western Europe data region. Every request to any website passes through a network like this.
- ResendDelivers our emails. It receives your address and the email we're sending, nothing else.
Both are US companies, so your data may be handled in the United States. Where the law requires it, that transfer is covered by the European Commission's standard contractual clauses in their data processing terms. We will update this page before we add anyone to this list.
We would only hand data to anyone else if the law forces us to, and we would tell you unless we're legally barred from doing so.
Emails we send
- One confirmationRight after you join. Until you click it, you don't get anything else.
- Your invite link, when you askIf you enter your email again, we send your link to your inbox. Never more than once every 10 minutes.
- Cirrun newsProgress on the alpha and your invitation when your turn comes. Only about Cirrun, never anyone else's offers.
Every email has a "Remove me" link. One click deletes your address and your place, and works straight from your email app's own unsubscribe button too.
After you leave, we keep one thing: a scrambled, one-way fingerprint of your address. It can't be turned back into your email. Its only job is to stop anyone from signing you up again. If you want to come back, email us and we'll clear it.
Your rights
Whatever country you live in, you can ask us to:
- show you everything we hold about you
- send it to you as a file
- correct it
- delete it
- stop using it, or restrict how we use it
- take back your consent at any time
Email privacy@cirrun.com from the address you signed up with. It's free, and we answer within 30 days, usually much sooner. To delete yourself right away, use the "Remove me" link in any of our emails.
You can also complain to your data protection authority, for example in your EU country, the UK's ICO or the UAE Data Office. We'd like the chance to fix it first.
California and other US states: we don't sell or "share" personal information as those laws define it, and we hold no sensitive personal information.
Keeping it safe
- Encrypted in transitEvery page, form and email link uses HTTPS.
- Secret linksConfirmation and removal links use long random codes, and only work with a button press, so email scanners can't trigger them.
- Very few handsOnly the founder can open the list, with a private key. We never put your email in a web address, a log or a spreadsheet shared with others.
- Little to loseThe best protection is not having data. We hold almost none.
If something ever goes wrong and it affects you, we will tell you quickly and plainly, and report it to the authorities within the time the law sets.
Children
Cirrun is built for developers, researchers and companies. If you're under 16, ask a parent or guardian before you join. If we learn we hold the email of a child under 13 without a parent's permission, we delete it.
Who we are
Cirrun is being incorporated as Cirrun Inc., a Delaware corporation in the United States. Cirrun is responsible for your data (the "controller", in GDPR terms). We'll add the company's registered address here as soon as it exists.
Questions about privacy: privacy@cirrun.com.
Changes
This page covers cirrun.com and the waitlist. Before the alpha opens, we'll update it to cover the product itself, and you'll see the new version before you run anything.
If we ever want to use your data in a new way, we'll email you first and ask, rather than slipping it into an update. The date at the top always shows the latest change.