privacy policy

Last updated: 9 October 2026

who is responsible

FRED (joinfred.io) is a project by Anything But Ordinary GmbH, Prinz-Eugen Street 17, 4020 Linz, Austria ("we"). We are the controller for the processing of personal data described here.

Contact for data protection questions: Dr. iur. Gabriel Thurner, office@anythingbutordinary.at, +43 676 7016518.

the short version

• We only ask for your email address, and only to tell you when FRED launches.
• You confirm your address by email before you are on the list (double opt-in).
• No advertising trackers, no analytics cookies, no third-party fonts or scripts.
• You can unsubscribe or have your data deleted at any time.

joining the waitlist

When you sign up for the waitlist we store:

• your email address,
• the date and time of your sign-up and of your confirmation,
• the IP address and browser type used for the sign-up and for the confirmation,
• the version of the consent text you agreed to,
• if you arrived through one of our QR codes or links: the code of that campaign (for example the event where the code was displayed).

Purpose: to send you the confirmation email, to send you your invite when FRED launches, to be able to prove that you asked to be on the list, and to understand which events and channels people come from.

Legal basis: your consent (Art. 6 (1) (a) GDPR and § 174 of the Austrian Telecommunications Act 2021). You can withdraw your consent at any time with effect for the future.

How long: if you do not confirm your address within 7 days, your sign-up is deleted automatically. If you confirm, we keep your data until you unsubscribe or until the waitlist is closed after launch, whichever comes first.

unsubscribing and deletion

Every email we send after the confirmation email contains an unsubscribe link. When you unsubscribe, we delete your email address and the data listed above. We keep only a non-reversible fingerprint (hash) of the address together with the note "unsubscribed", so that the address is not added and mailed again by mistake.

You can also ask us to delete your data by writing to the contact above.

emails

Emails are sent from noreply@joinfred.io. We do not track whether you open an email or click a link. If an email cannot be delivered, or if you mark it as spam, we receive a technical notice from our mail provider and stop sending to that address.

protection against misuse

To protect the sign-up form against bots and misuse:

• your browser solves a small computing task before the form is sent. This happens on your device; no data is sent to third parties and no cookie is set;
• we limit how many sign-ups can come from one internet connection. For this we store a shortened, salted fingerprint of the IP address for up to 24 hours; it is then deleted automatically within a few days. It cannot be turned back into the IP address.

Legal basis: our legitimate interest in a secure and working service (Art. 6 (1) (f) GDPR).

qr codes and links

Our QR codes lead to a short address on joinfred.io that forwards you to the website. We count how often each code is used per day. This count contains no personal data. The code is only connected to you if you then sign up for the waitlist (see above).

cookies and local storage

This website does not set cookies and does not store anything on your device for the waitlist. The campaign code from a QR code is only kept in your browser's memory while the page is open.

hosting and processors

The website and the waitlist are operated on Amazon Web Services (AWS), region Frankfurt, Germany (Amazon Web Services EMEA SARL, Luxembourg), acting as our processor under a data processing agreement. This includes the delivery of the website, the database and the sending of emails. As with any website, the hosting provider processes your IP address in order to deliver the page.

We do not sell your data and do not pass it on to anyone else.

your rights

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing that is based on legitimate interest. You can withdraw your consent at any time.

To use these rights, contact us using the details above. You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehoerde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

changes

We will update this policy when the website or its functions change. The current version is always available on this page.