Privacy
How Ondori handles your data
Last updated: 23 October 2026
- We collect what you give us to join the waitlist or sign in: your email address and, if you built your Ondori, your answers.
- No advertising, no analytics and no tracking cookies.
- We don't sell your data.
- You can delete everything at any time, from any of our emails or this website.
Who we are
Ondori Lab ("Ondori", "we") runs ondorilab.com. Owner to confirm: legal entity name and registered address.
Questions or requests: support@ondorilab.com.
What we collect and why
| What | When | Why |
|---|---|---|
| Your email address | When you join the waitlist or sign in | To confirm it's you, sign you in, and tell you about Ondori's launch. We don't use it for anything else. |
| Your Google account ID and email address | Only if you choose "Continue with Google" | To sign you in. Google also sends your name and profile picture; we don't keep them. |
| Your "Build your Ondori" answers: how you identify (optional), where you move most, your sport and how you play it, what you want to understand, how often you check your wrist and how hard you push, plus the homepage version you chose | Only if you answered and then joined the waitlist or signed in | To keep your homepage the same on every device, tailor our emails to you, and learn what people want from Ondori. |
| Anonymous answer totals | When you finish building your Ondori, whether or not you join | We add one to a running count for each answer you picked yourself (not the ones we picked for you). We store only the totals: no email, no ID, no IP address and no time. |
A sign-in cookie, ondori_session |
Only after you sign in | To keep you signed in. It's strictly necessary and holds a random code, nothing else. |
| A scrambled, one-way code made from your IP address, and one made from the email address you entered | When you join, sign in or send your answers | To stop repeated attempts. Each code is kept for up to an hour, then deleted in our regular clean-up. |
"How do you identify?" is optional and starts as "Prefer not to say". We ask it only so Pilates can be offered to the visitors it's meant for, and the answer is stored like your other answers.
On your device
Your answers and the homepage version you chose are saved in your browser's local storage, so the site remembers them. If you've signed in, a note that you have is saved there too, so the site knows to check. These stay on your device unless you join, sign in, or finish the flow (anonymous totals only). Clearing your browser's site data removes them.
Who handles it for us
- Vercel hosts the website and runs our sign-up code. Like any web host, it processes technical data such as your IP address and browser type to deliver pages. Owner to confirm: Vercel log retention on our plan.
- Neon runs our database, where accounts and answer totals are stored. Owner to confirm: database region.
- Resend sends our emails from support@ondorilab.com.
- Google, only if you use Google sign-in. Google's sign-in button loads when the sign-in options come into view, which lets Google see your IP address and browser details.
- Google Fonts serves this site's fonts, which lets Google see your IP address and browser details.
They handle data only to provide their service to us. Owner to confirm: where these services process data and the safeguards for transfers outside your country, if your law requires them.
How long we keep it
- Your account (email, answers and Google ID if used): until you leave the waitlist or delete it.
- An address that's never confirmed: deleted after 30 days.
- Links in our emails stop working after 7 days ("Confirm it's you") or 30 minutes (sign-in).
- Sign-in sessions: 180 days, or until you sign out.
- Anonymous totals: kept, as they can't be linked to anyone.
Your choices
- Leave and delete everything: use "Leave the waitlist" in any of our emails, or "Delete my data" on the waitlist card when you're signed in. This deletes your account, answers and sessions straight away.
- See or correct your data: write to support@ondorilab.com. You can also change your answers yourself with "Edit your Ondori" while signed in.
- Don't want to share answers at all: skip "Build your Ondori" with "Just show me".
Owner to confirm: which privacy laws apply to Ondori (for example GDPR or UK GDPR), the legal basis for each use above if they do, and the regulator people can complain to.
Age
Owner to confirm: the minimum age for joining the waitlist.
Changes
If we change what we collect or how we use it, we'll update this page and the date at the top first.