No. 00 · privacy

What we keep,
and why.

Last updated · April 2026

This page sets out what Cerate collects when you visit the site or join the list, why, and for how long.

When you join the list

We store your email address. If you give them, your first name and head size. We use this to write to you once, when the product is ready, and to understand where demand for it is.

When you visit the site

We record the page you viewed, the time, the site that referred you, and any campaign tags in the address. We also store an approximate location derived from your IP address, so we can see which countries and cities people are reading from. The IP itself is stored only as a salted hash, never as the raw address.

A small cookie named cerate_sid holds a random identifier so that repeat visits in one browser count as a single session. It lasts a year. It is a first-party cookie, set by Cerate alone. No advertising cookies, no third-party trackers, no analytics pixels.

What we do not collect

No full name, phone number, or postal address. No payment details. No data bought from a broker.

Why

Two reasons. To write to you at launch. To understand how people find us, so we know where to keep the work going.

Lawful basis

Waitlist data is held on the basis of your consent, given by submitting the form after reading the line under it. Site analytics are held on the basis of our legitimate interests in understanding traffic, as set out in Article 6(1)(f) of the UK GDPR. You can ask us to stop processing your record at any time.

How long we keep it

Waitlist entries are kept until the product launches plus twelve months, or until you ask us to delete them, whichever comes first. Site visit records are kept for ninety days and then removed.

Where it lives

In a Cloudflare database, within the European region. Cloudflare processes the data on our behalf.

Your rights

You can ask to see, correct, or delete the data we hold on you. Email [email protected] with the address you used to join, and we will take care of it within thirty days. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Who we are

Cerate is a small independent brand based in Britain. For questions about this policy, write to [email protected].

Questions · [email protected]