Privacy, for the waitlist
Short version: we take one email address for one purpose, we confirm it is yours before it counts, and one click removes it. This page is about the waitlist on getmarula.com only.
What we collect
Your email address and the time you confirmed it. That is it. The form does not store your IP address or browser, and nothing about you is stored until you click the link in the confirmation mail — the link is a signed token, not a record. The list itself is held by Resend, the mail provider that sends every message. No tracking cookies, no analytics on this site in phase 1.
Why, and the lawful basis
The address is used to run the waitlist: to confirm you asked, to confirm your place, and to send launch news to the list. That is it. The lawful basis is your consent — given when you join and confirmed when you click the link we mail you. Double opt-in means an unconfirmed address receives exactly one mail and is then forgotten.
Who sees it
The people operating Marula, and Resend, the mail provider that stores the list and delivers every message. Addresses on the list are never published or shared beyond that.
Leaving
Every mail carries an unsubscribe link, and you can leave without waiting for one: request a deletion link, confirm it, and the contact is deleted from the list — not flagged, not kept for analytics. This is the GDPR deletion path, and it works the same for every address.
How long we keep it
Confirmed addresses stay until you leave or the waitlist ends at launch — at which point the list either becomes the launch-notice list you were promised, or is deleted. An address that never confirms is never stored, so there is nothing to expire: its link simply stops working after 30 days. Deletion links are valid for 7 days.
Contact
Questions, access requests, or a complaint — mail hello@getmarula.com and a person answers. You can also leave the list instantly via the homepage form or any mail footer. If you are in the EU or UK and unsatisfied with our answer, you can complain to your local data protection authority.
Last updated: October 2026. Changes to this page will be dated here. Back to the site.