Privacy Policy
Last updated 24 May 2026
gwaindex (“we”, “us”) is an independent search index for publicly posted audio. This policy explains what personal data we collect when you use this site, why, and the rights you have under UK and EU data protection law (UK GDPR and the EU GDPR). We are the data controller for that data; contact us at [email protected].
What we collect
- Waitlist sign-ups.If you join the waitlist we store your email address, the part of the site you signed up from, and the date and time. That’s it.
- Abuse prevention. When you submit the form, your IP address is used transiently to rate-limit the endpoint. It is not stored alongside your email.
- Bot protection (hCaptcha). To keep the waitlist free of bots and abuse, the sign-up form uses hCaptcha, provided by Intuition Machines, Inc. When you submit the form, hCaptcha may collect device and usage information (such as your IP address, browser data, and interaction signals) and may set a cookie to tell humans apart from automated traffic.
- Analytics. We use Cloudflare Web Analytics, which is privacy-first and cookieless. It does not use fingerprinting, does not track you across sites, and does not collect data that identifies you.
- No advertising cookies.We set no advertising or analytics cookies. Apart from the hCaptcha cookie described above, the only thing stored in your browser is a local flag remembering that you confirmed your age, so you aren’t asked on every visit.
Why we use it, and our lawful basis
We use your email for one purpose: to notify you when early access opens. Our lawful basis is your consent, given when you submit the form. We will not send you marketing beyond the launch notification, and we will never sell, rent, or share your email.
The bot-protection processing by hCaptcha relies on our legitimate interest (UK/EU GDPR Art. 6(1)(f)) in keeping the form and the waitlist secure against automated abuse.
Who it’s shared with
We don’t sell or share your data. It is processed only by the infrastructure that runs this site: our hosting provider, Cloudflare (CDN and cookieless analytics), and hCaptcha for bot protection. hCaptcha acts as an independent processor under its own Privacy Policy and Terms. These providers may process data in the UK, EU, or US under appropriate safeguards.
How long we keep it
We keep waitlist emails until launch and a reasonable period afterwards, or until you ask us to delete yours — whichever comes first.
Your rights
Under UK/EU GDPR you can ask us to access, correct, or delete your data, withdraw your consent at any time, or object to our processing. Email [email protected] and we’ll action it. You also have the right to complain to the UK’s Information Commissioner’s Office (ICO) or your local supervisory authority.
Changes
We’ll update this page if our practices change, and revise the date above.
Questions about this page? Email [email protected]. This page is general information, not legal advice.