Updated 2026-08-23

Privacy

Lotus has no download yet, so this site does exactly one thing with data: it takes an email address for the beta waiting list. This page says what happens to it, in the order the GDPR asks.

The Lotus desktop app, and what it does with a Google account you connect to it, has its own privacy policy.

Who is responsible

The controller of your data is <legal entity name>, <registered postal address>. Write to <privacy contact email> about anything on this page.

There is no Data Protection Officer. At this size the law does not require one, and claiming a role nobody holds would be worse than saying so.

What we collect

Your email address, and one word recording which part of the site or which link you signed up from — hero, footer, x, reddit. That word exists so we know which channels are worth our time, and it is the only measurement on this site.

Nothing else. No name, no company, no job title, no IP log of our own, no cookie, no analytics script, no session recording, no fingerprint. This page does carry one small script — it is what lets you drag the nodes in the demo — and it makes no network request, stores nothing, and reads nothing about you.

Why, and on what basis

To send you a short build log roughly every two weeks, and an invite when the macOS build is signed. Nothing else — no ads, no selling, no sharing with anyone who is not listed below.

The legal basis is your consent, GDPR Art. 6(1)(a), given when you submit the form and confirm the mail that follows. Giving us the address is entirely optional; the only consequence of not giving it is that you do not get an invite.

Who else sees it

Buttondown, the newsletter service that stores the list and sends the mail. They act as our processor and are in the United States, which is a transfer outside the EEA under Chapter V — covered by the Standard Contractual Clauses in their data-processing terms.

Cloudflare, which serves this page and therefore sees the request. They do not receive the list.

Google, which serves the three typefaces this page uses from fonts.googleapis.com and fonts.gstatic.com. That means your IP address reaches Google when the page loads, whether or not you ever type an address into the form. We would rather it did not, and self-hosting the fonts is the fix; it has not been done yet, so it is disclosed instead of glossed over.

Nobody else. No advertising network, no data broker, no affiliate.

How long we keep it

Until you unsubscribe, or until the beta list is closed and the invites have gone out — whichever comes first. When either happens the address is deleted from Buttondown rather than archived.

Your rights

You can ask for a copy of what we hold, correct it, have it deleted, restrict or object to what we do with it, or take it elsewhere in a portable form. Write to <privacy contact email> and we will act within one month, which is the deadline Art. 12(3) sets.

You can withdraw consent at any time — every mail we send carries a one-click unsubscribe, and using it needs no explanation and no reply from us.

Nothing here is automated decision-making or profiling in the sense of Art. 22. A person reads the list; no system scores you.

Complaints

If you think we have handled your data badly, tell us first — but you do not have to. You have the right to complain directly to your national supervisory authority, and doing so costs you nothing.

Changes

If this notice changes in a way that affects what happens to an address already on the list, we will say so in the build log rather than quietly editing this page. The date at the top is the last change.

Back to the start