Join the beta

Privacy is important to us

Last updated: 7 October 2026

Who we are

This policy explains what personal data hypertempo.io collects, why, and what you can do about it. It covers this website only. The HyperTempo app will have its own policy when it launches.

HyperTempo is run by George Woodman, Cherry Wood Lodge, Burtle, Bridgwater, Somerset, TA7 8NF, United Kingdom. He is the controller of the personal data described here, and "we" in this policy means him. He is registered with the Information Commissioner's Office (ICO) under registration number ZC264690.

For anything about your data, email [email protected]. We'll reply within one month.

What we collect and why

We collect as little as the site needs: what you send us through our forms, and basic technical data from every visit.

When you join the beta waitlist. We store your email address and, on the main waitlist form, what you're training for (for example Hyrox or a half marathon) and that you agreed to hear from us. We use them to send a confirmation email, to invite you when the beta opens, to shape what we build first and, if you agreed when you signed up, to send occasional emails about the beta. We also save your IP address and browser details with your signup, to help us spot spam. We get a copy of each signup by email so we know who has joined. Our beta emails tell us whether they were opened and which links were clicked, so we can see what's useful.

When you contact us. If you email us or use our contact form, we keep what you send so we can reply. On the form, that's your name, email address, phone number if you give one, why you're getting in touch and your message. We also save your IP address and browser details with form messages, to help us spot spam. If you tick the newsletter box, we add your name and email address to our mailing list, to send you occasional emails about HyperTempo.

When you give beta feedback. If you fill in our beta feedback form, we keep your answers to improve HyperTempo, with your IP address and browser details to help us spot spam. Your email address is optional, and if you give it, we only use it to follow up on your answers.

Spam protection. Our forms use Cloudflare Turnstile, a check that most people never see. It looks at technical signals from your browser and device, such as your IP address and browser details, to tell people from bots. We also use a hidden field and a short timer that reject automated submissions.

Analytics, only if you accept. If you accept analytics cookies, Google Analytics records which pages you visit, how you found the site, your approximate location, and your device and browser. We use it to understand what's working on the site. If you don't accept, Google Analytics doesn't load at all.

Counting form submissions. When anyone sends one of our forms, our server tells Google Analytics that it happened and on which page. It sends which form was used and, from the main waitlist form, what you're training for. Nothing else you enter is sent: not your name, email address, message or feedback. If you accepted analytics cookies, the submission is linked to your Google Analytics visit. If you didn't, it's counted anonymously with a random one-off ID and the country your visit came from, so it can't be linked to you.

Every visit. Like any website, our server and Cloudflare, which protects and speeds up the site, receive your IP address, browser details, the pages you request and when. These are kept in short-lived logs for security and to fix problems.

Fonts. The site's fonts load from Google Fonts, so your browser sends your IP address to Google when a page loads.

Social media. HyperTempo has pages on Instagram and Facebook and a club on Strava. If you follow us, message us or join the club, we see what the platform shows us, such as your profile name and anything you send us, and we use it to run our pages and reply to you, based on our legitimate interests. Each platform handles your data under its own privacy policy. Meta also gives us statistics about visits to our Facebook and Instagram pages, and we share responsibility for that data with Meta under its Page Insights terms. Meta handles requests about it.

We don't sell your data, use it for advertising, or make automated decisions about you.

Our legal reasons

UK data protection law needs a lawful basis for each use of your data. Ours are:

  • Waitlist signups, beta emails and our newsletter: consent. You can withdraw it at any time by unsubscribing or emailing us.
  • Analytics cookies and Google Analytics: consent, given in the cookie banner.
  • Spam protection, security logs, fonts and anonymous form counts: legitimate interests, which are keeping the site secure, working and free of spam, and knowing how many people sign up or get in touch. These uses are limited to what's needed, and we don't use them to profile you.
  • Replying to your messages: legitimate interests, which is answering your question.
  • Beta feedback: legitimate interests, which is improving HyperTempo.

Cookies

We use two kinds of cookies: strictly necessary ones that keep the site working, and analytics cookies that only go on your device if you say yes. Change your choice any time from Cookie settings at the bottom of every page. Switching analytics off deletes the Google Analytics cookies.

Strictly necessary

  • ht_consent remembers your cookie choices. It lasts 6 months.
  • CRAFT_CSRF_TOKEN protects our forms from forged submissions. It lasts until you close your browser.
  • CraftSessionId keeps form messages working between pages. It lasts until you close your browser.
  • __cf_bm and cf_clearance may be set by Cloudflare to tell people from bots and protect the site and its forms. They only appear when Cloudflare's bot protection checks a visit, and usually last 30 minutes.

Strictly necessary cookies don't need your consent under the Privacy and Electronic Communications Regulations (PECR), so the banner can't switch them off. You can still block them in your browser, but the forms may stop working.

Analytics (only if you accept)

  • _ga is set by Google to recognise your browser between visits. It lasts 2 years.
  • _ga_… is set by Google to keep track of your current visit. It lasts 2 years.

Who we share it with

We only share data with the services that run the site, and each one may only use it to provide its service to us.

  • Hetzner hosts the website and its database, in Germany.
  • Cloudflare delivers and protects the site and runs Turnstile spam protection, worldwide including the US. It also stores our backups, encrypted before they leave our server, in the EU.
  • Brevo sends our emails and holds our mailing list, in the EU.
  • Proton hosts our email inbox, in Switzerland.
  • Google provides Google Analytics (only if you accept) and Google Fonts, worldwide including the US.

We'd also share data if the law requires it, or to protect our rights and users.

When data goes outside the UK, it's protected in one of two ways. The UK recognises the EU and Switzerland as protecting data to UK standards. For the US, Google and Cloudflare are certified under the UK Extension to the EU-US Data Privacy Framework, and their contracts include the UK's standard data transfer terms.

How long we keep it

  • Waitlist signups: until you unsubscribe or ask us to delete them, and no longer than 12 months after the app launches.
  • Newsletter signups from the contact form: until you unsubscribe or ask us to delete them.
  • Beta feedback: no longer than 12 months after the app launches.
  • Google Analytics data linked to your browser: 14 months, then Google deletes it. Totals that don't identify anyone, like monthly visits, are kept.
  • Copies of form submissions in our inbox: deleted on the same schedule as the submissions themselves.
  • Server logs: up to 14 days.
  • Database backups: Up to 3 months. Nightly copies stay on our server for 14 days, and encrypted copies are kept in Cloudflare's storage, in the EU, for up to 3 months.
  • Messages you send us, by email or the contact form: as long as needed to deal with them, then deleted within 12 months.

When you unsubscribe, we keep your email address on a short suppression list so we never email you again by mistake.

Your rights

You can ask us to:

  • give you a copy of the data we hold about you
  • correct it if it's wrong
  • delete it
  • stop or limit how we use it
  • send it to you, or another service, in a common format

You can also object to anything we do on the basis of legitimate interests, and withdraw consent at any time. To stop our newsletters and beta updates, use the unsubscribe link in any of them. To stop any other emails from us, reply to one or email us. To change your cookie choice, use Cookie settings at the bottom of the page.

To use any of these rights, email [email protected]. It's free, and we'll reply within one month.

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Children

The site isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, email us and we'll delete it.

Keeping it safe

The site only works over an encrypted connection, the server is locked down and kept up to date, and only the people who run HyperTempo can see what you send through our forms.

Changes to this policy

If we change how we use your data, we'll update this page and the date at the top. If the change matters to people on the waitlist, we'll email them too.