Privacy
Effective 2026-10-03.
What we collect
- Waitlist sign-ups. Your name, email address, postcode, what you want made and any note you type, plus a record of the consent wording you agreed to and when. Wood shops that apply also give a shop name, contact name, machines, bed size, materials and lead time.
- Projects. If you save a configuration to a project, we store the design, your settings, a project name and the email address you gave. That address is not verified, and the project is reached through an unguessable link.
- Proposals. If you propose a style or glossary entry, we store what you wrote and your email address.
- Sign-in and orders. Accounts and ordering are not live yet. When they are, this page will be updated to cover sign-in codes, order and delivery details, and tax records.
- Server logs. Our server keeps ordinary request logs, which include IP addresses. We also use your IP address in memory to limit how fast one visitor can submit the sign-up forms.
Cookies and similar storage
- Dark-mode choice. Saved in your browser's local storage under
kerf-theme. It is never sent to us. - Analytics. We use PostHog, a product-analytics service, to see which pages are used and how. Its script runs on every page, sets cookies or local storage in your browser, and sends page views, basic browser details and a few feature events (for example, that a floor template was downloaded, with the design and paper size but nothing about you) to PostHog's US cloud (
us.i.posthog.com). We configure it to build a person profile only for visitors who identify themselves; everyone else is counted anonymously. This site does not yet offer a switch to turn analytics off. Your browser's tracking-protection settings or a content blocker will stop it. - Crash reports. If the server crashes while handling your request, we send PostHog a report of what went wrong: the error and a stack trace, and the URL you were on when it happened. This is server-side only — it does not run in your browser — and only fires on a crash, not on ordinary requests.
- Embedded map. The About Us page embeds a Google Map. Loading that page loads Google's map frame directly from Google, which can set its own cookies and sees your IP address and browser details the same way any site you visit would. This only happens on that one page.
- Bot check. The waitlist sign-up forms and the contact form use Cloudflare Turnstile, a challenge that tells us apart from a bot. Loading one of those forms runs Cloudflare's script, which can set its own cookies and sees your IP address and browser details, and submitting the form sends the challenge result to Cloudflare for us to check.
Who processes your data
- Amazon Web Services. The site and its database run on AWS in the US, and email is sent through Amazon SES.
- Cloudflare. Traffic reaches the site through Cloudflare, which sees requests in transit, and the bot check above (Turnstile) is also Cloudflare's.
- PostHog. Analytics, as above.
- Google. The embedded map on the About Us page, as above.
- We do not sell personal data and we do not run advertising.
We only email an address that was typed into the site by its owner. Waitlist sign-ups are double opt-in: we send a confirmation, and nothing more until you confirm. Every message from the waitlist carries an unsubscribe link, and unsubscribing stops further mail.
If a message to an address bounces permanently, or the recipient marks it as spam, Amazon SES tells us and we add that address to a suppression list so we never send to it again. A spam complaint also unsubscribes the address from the waitlists. The suppression list keeps the address itself, because that is how the block works.
How long we keep it
Waitlist records are kept until you unsubscribe and ask us to erase them, or until the waitlist closes. Projects and proposals are kept until you ask us to delete them. Backups of the database are replicated continuously and age out on a rolling schedule.
When accounts launch, deleting an account will start a seven-day window in which you can change your mind, after which your personal data is erased. Projects you chose to publish stay up with your name removed. Order and tax records we are required to keep are retained in a minimal form.
Your choices
You can ask to see, correct or delete what we hold about you. Email [email protected] from the address in question and we will act on it. For the waitlist, the unsubscribe link in any message works immediately.