Privacy policy

Last updated: 7 October 2026

This policy explains what personal data we process when you visit m1spec.com or join the M1Spec waiting list, why we do it, and what rights you have under the EU General Data Protection Regulation (GDPR). It covers this website only. The M1Spec product itself (app.m1spec.com) has its own terms.

1. Who is responsible

The controller for the processing described here is:

For anything about your data, write to the email address above.

2. Visiting the website

When you open m1spec.com, your browser sends technical information that is needed to deliver the page: your IP address, the date and time, the page requested, and your browser's user-agent. We use it only to deliver the page and keep the service secure.

• No cookies, no tracking, no analytics. The site sets no cookies, uses no analytics or advertising tools, and loads no third-party scripts, fonts or embeds. Everything is served from our own server.
• Abuse protection. To stop automated spam, the waiting-list and contact forms limit how often one IP address can submit them. The address is held in memory for at most one minute and is never written to storage.
• Legal basis: our legitimate interest in delivering a secure website (Art. 6(1)(f) GDPR).

3. The waiting list

If you join the waiting list, we store:

• your email address,
• your role, if you choose one,
• the referral tag in the link you followed, if there was one,
• the date and time you signed up and gave your consent.

We use this only to tell you about M1Spec: when your spot is ready, and news about the launch. We do not sell it, rent it or share it for anyone else's marketing.

• Legal basis: your consent (Art. 6(1)(a) GDPR), which you give with the checkbox on the form.
• Withdrawing consent: you can withdraw it at any time, without giving a reason, by emailing us. We then delete your entry. Withdrawal does not affect anything we did before it.
• How long we keep it: until you withdraw your consent or we close the waiting list, whichever comes first. After that, we delete it.

4. Contacting us

If you write to us by email or through the contact form, we process your email address, your name if you give it, your message and the time it was sent, to answer you and handle your request.

• Legal basis: taking steps at your request before a possible contract (Art. 6(1)(b) GDPR), or otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
• How long we keep it: as long as needed to handle your request and any follow-up, then we delete it.

5. Hosting and service providers

The website, the waiting list and contact messages run on Microsoft Azure (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). The data is stored in Microsoft's Sweden Central region, inside the European Union. Microsoft processes it on our behalf under a data processing agreement (Art. 28 GDPR).

Microsoft may access data from outside the EU, for example for support or security. For transfers to the United States, Microsoft Corporation is certified under the EU–U.S. Data Privacy Framework, and Microsoft's terms include the EU Standard Contractual Clauses.

6. Your rights

You have the right to:

• get a copy of the data we hold about you (Art. 15),
• have it corrected (Art. 16) or deleted (Art. 17),
• restrict its processing (Art. 18),
• receive it in a portable format (Art. 20),
• object to processing based on legitimate interest (Art. 21),
• withdraw your consent at any time (Art. 7(3)).

To use any of these, email us at the address in section 1. You also have the right to complain to a data protection supervisory authority. In Austria that is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna (dsb.gv.at). You can also complain to the authority where you live or work.

7. Automated decisions

We do not make automated decisions or create profiles about visitors or waiting-list members.

8. Changes

We update this policy when what we do changes. The date at the top shows the latest version.