Privacy
Last updated 25 September 2026. This page covers tapdraft.ai and its early access list.
Who is responsible
The data controller is Niccolò Banti, an individual based in Italy, who builds TapDraft. For anything about your data, write to hello@tapdraft.ai.
What is stored when you join the list
- Your email address.
- Your X handle, only if you choose to give it.
- The tag of the link that brought you (the
refpart of the address), if it carried one. It says which shared post led to the signup, never anything about you. - When you joined, when you confirmed, and whether you left.
- Once you confirm, a SHA-256 fingerprint of your address, kept on TapDraft's own server so the founding price can be applied when you subscribe with that address. It is not the address itself, but anyone who already has your address could match it, so it is treated as your data too.
Your IP address is not stored. It is used for a moment, in memory, to limit how many signups one connection can make per minute. The spam check (Cloudflare Turnstile) looks at signals from your browser to tell people from bots; it sets no tracking cookie. This site has no analytics and no advertising trackers.
Why, and on what basis
To confirm your address, to send your early access invite, to announce the launch, and to give you the founding price when you subscribe. Nothing else: no newsletter, no sharing, no selling. The legal basis is your consent (Article 6(1)(a) GDPR), given when you confirm the email we send you. You can withdraw it at any time with the link in every email or by writing to hello@tapdraft.ai.
Who processes it for us
- Cloudflare hosts this site and the list database, and runs the spam check.
- Resend sends the emails and keeps the list of confirmed addresses used for the invites.
- Netcup, a German hosting company, runs the server where the fingerprint is kept.
Cloudflare and Resend may process data in the United States, under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long it is kept
- An address that is never confirmed is deleted after 7 days.
- When you leave the list, your address and its fingerprint are deleted, normally within the hour, and the founding price reserved for it goes with them.
- A confirmed address is kept until you leave the list, and at most 12 months after the launch. If you subscribe with it, the fingerprint becomes part of your TapDraft account instead.
Your rights
You can ask to see, correct, export or delete your data, or object to its use, by writing to hello@tapdraft.ai. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority where you live.