Version 1.0 — Effective July 24, 2026
WEFT's whole pitch is that your data is nobody else's business. This site is built the same way: we collect the minimum, we sell nothing, and we run no ad trackers.
| Data | When | Why |
|---|---|---|
| Email address (required); company name and team size (optional) | When you join the waitlist | To contact you about WEFT early access — the thing you asked for |
| Your agreement to the Terms (version + timestamp) | When you check the box and submit | Record that you accepted the Terms (clickwrap) |
| IP address (short-lived) and country code | When you submit the form | Rate limiting and abuse prevention only; the IP counter expires within one hour |
| Standard server logs (Cloudflare) | All visits | Our host, Cloudflare, processes requests to serve and protect the site |
That's the whole list. No analytics scripts, no advertising pixels (no Meta Pixel, no Google Analytics), no cross-site tracking, no cookies set by us, no selling or renting of your data. Ever.
The "use your real hand" demo uses your camera entirely inside your browser. The hand-tracking model (an on-device machine-learning model) runs locally on your machine. No video, no images, and no hand data are recorded, stored, or sent to us or anyone else. The camera turns off when you stop the demo or leave the page. Your browser will ask for permission first, and you can decline — the mouse demo works without it.
The only machine-learning feature on this website is the on-device hand-tracking model described above. This site's chat-free, upload-free design means your content never reaches any AI service through us. The WEFT product in development uses on-device gesture recognition the same way: the camera feed is processed locally and is never uploaded.
Waitlist entries are stored with Cloudflare (our hosting and storage provider), protected by access controls. We keep waitlist data until launch communications are complete or you ask us to delete it, whichever comes first.
We share personal data only with: (a) Cloudflare, as our infrastructure provider; (b) authorities if the law genuinely requires it. That's it. We do not sell, rent, or trade your personal information, and we have not done so in the preceding 12 months.
You can email us at any time to: know what we hold about you, get a copy, correct it, or delete it. California residents additionally have the rights to know, delete, correct, and opt out of sale or sharing — we do not sell or share personal information as defined by the CCPA, so there is nothing to opt out of, and we do not discriminate against anyone for exercising their rights. EU/UK visitors: we process waitlist data on the basis of your consent, which you may withdraw by asking us to delete your entry.
This Service is not directed to children under 13, and we do not knowingly collect personal information from them (COPPA). If you believe a child under 13 submitted data, email us and we will delete it.
The site is served over HTTPS with strict security headers; the waitlist endpoint is rate-limited and validates input. No system is perfectly secure — please don't submit anything beyond what the form asks for.
If this policy changes, we will post the new version here with a new effective date. Material changes to how we handle waitlist data will be emailed to the waitlist.
Privacy questions or requests: neilsgupta@outlook.com