Privacy Policy

We collect the following categories of information:

• Waitlist information: the email address you submit when you join a product waitlist, the project you signed up for, the date and time of your submission, the referring website, and any campaign parameters present in the link you followed (for example utm_source, utm_medium, and utm_campaign).
• Comment information: the name and the comment text you submit on a project page, and the date and time you submitted them. Comments are published on that page, so treat both the name and the text as public. Please do not include anything in a comment you would not want shown publicly.
• Usage information: the pages you view, the site that referred you, a coarse device category (mobile, tablet, or desktop), the country your network resolves to, how far you scroll on a page, and which links, project tiles, and cards you click. This is collected automatically by our own first party measurement.
• Pseudonymous session identifier: to group activity within a single day, we compute a one way hash of your IP address, your browser user agent string, the current date, and a secret value we hold. The inputs cannot be recovered from the hash, the secret changes the result daily, and we never store your IP address. Because the date is part of the input, the identifier changes every day and cannot be used to recognize you across days.
• Correspondence: information you provide if you contact us by email.

We do not operate user accounts, we do not process payments, and we do not request or store names, postal addresses, phone numbers, or financial information.

We use information to:

• notify you when a product you joined the waitlist for becomes available, and to manage that list;
• understand which pages, projects, and posts people engage with, so we can decide what to build and write next;
• measure whether links we share, including advertising and social campaigns, bring people to the Site;
• operate, secure, and improve the Site, including detecting abuse and limiting automated submissions; and
• comply with legal obligations and enforce our terms.

We do not use your information to build advertising profiles, and we do not run behavioral advertising on the Site.

Where the GDPR or UK GDPR applies, we process personal data on the following legal bases: consent, when you choose to submit your email address to a waitlist; legitimate interests, in operating and improving the Site and in understanding aggregate usage through measurement that does not identify you; and legal obligation, where the law requires us to retain or disclose information.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. No money changes hands for your data, and no advertising or analytics network receives it from us.

We share information with service providers who process it on our behalf under contract, limited to what they need to perform their function:

• Supabase, which hosts the database holding waitlist entries and usage events;
• Vercel, which hosts and delivers the Site and processes standard server request logs.

We may also disclose information to comply with law or valid legal process, to protect our rights, safety, or property, or in connection with a merger, acquisition, or sale of assets, in which case we will continue to protect the information as described here.

The Site sets no cookies on your device, and it stores no persistent identifier in your browser. Our measurement works without them, which is why you are not asked to accept a cookie banner.

The Site uses your browser session storage for a single purpose: to record that the animated wordmark has already played, so it does not replay on every page. That value contains no identifier, is never transmitted to us, and your browser discards it when you close the tab.

One cookie exists on this domain, and it is set only for the site owner: signing in to the private analytics dashboard sets a short lived, signed, HTTP only session cookie. Ordinary visitors never receive it.

Because we set no advertising or analytics cookies and never sell or share personal information, a Global Privacy Control signal from your browser requires no change in our behavior. We honor it by default. A fuller description is in our Cookie Policy.

Some pages, including the dive kit page, link to products sold by other companies. Where we participate in an affiliate program, we may earn a commission if you buy after following one of those links, at no additional cost to you. Those links are marked as sponsored. When you follow an outbound link we record that a link to that destination was clicked, so we can understand which recommendations are useful. Once you leave the Site, the destination operates under its own privacy policy, which we do not control.

We retain waitlist entries until the related product ships and the list is retired, or until you ask us to remove your address, whichever comes first. We retain published comments for as long as the project page stands, or until you ask us to remove yours. We retain usage events for as long as they remain useful for understanding trends, and we delete or aggregate them thereafter. We may retain information for a longer period where required by law or for security, audit, or dispute resolution.

We use technical and organizational measures designed to protect information, including encryption in transit, database access controls that deny public access by default, server side handling of all credentials, and rate limiting on submission endpoints. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent at any time.

EEA and UK (GDPR). You may exercise the rights above and may lodge a complaint with your local data protection authority. Withdrawing consent does not affect processing carried out before the withdrawal.

California (CCPA and CPRA) and comparable state laws. Residents of California, and of other states with comprehensive privacy laws, have the right to know, delete, and correct personal information, and to opt out of the sale or sharing of personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising, so there is no such activity to opt out of. We will not discriminate against you for exercising your rights.

To exercise any of these rights, or to have your address removed from a waitlist, contact us at privacy@ohtimmi.com. We may need to ask for the email address you submitted in order to locate your record. Because our usage measurement is designed not to identify you and retains no IP address, we are generally unable to locate or delete usage events associated with a particular person.

We are based in the United States, and information we collect is processed in the United States and in other countries where our service providers operate. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses, for cross border transfers of personal data.

The Site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us at privacy@ohtimmi.com and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated policy with a new “Last updated” date and, where appropriate, provide additional notice.

Questions about this Privacy Policy or your data? Contact ohtimmi LLC at privacy@ohtimmi.com.