EMRELIA. Join the waitlist

Privacy Policy

Last updated September 2026

Emrelia LLC ("we") runs emrelia.com and makes the Emrelia E3X. We collect as little as the product and store need to work, and we don't sell or share your data with advertisers.

Who is responsible

The data controller is Emrelia LLC, a Colorado limited liability company (Colorado Secretary of State ID 20261953065), United States. Privacy questions and requests go to [email protected].

What we collect

  • Waitlist email. Joining the waitlist sends you a confirmation link; until you use it, your address is held only in a pending record that expires after 24 hours. Once confirmed, your email address is stored with our commerce provider (Lemon Squeezy) and used only for E3X release news. Unsubscribe anytime — via the link in any email we send, or at any point (including before any email has been sent) by writing to [email protected] and we'll remove you from the list.
  • Purchases. Checkout is operated by Lemon Squeezy as merchant of record; they process your payment details and share with us your email, order, and license information. We never see your card number.
  • Account sign-in. Signing in uses a one-time link sent to your email. We store your email, session data, and license deactivation history to operate your account.
  • License activation. Activating the E3X sends your license key and a machine identifier (your computer's name plus a hashed hardware fingerprint) to our license service to enforce activation limits. The software checks in with the service about once a week when online.
  • Site analytics. We use Cloudflare Web Analytics, which is cookieless and does not track you across sites.
  • Spam protection. Forms use Cloudflare Turnstile, which evaluates your browser session to block bots.
  • Server logs. Our services record request metadata (such as IP address, time, and endpoint) briefly for security and abuse prevention, including short-lived rate-limit counters keyed by a hash of your IP address.

Cookies and similar storage

The site sets one cookie of its own: a session cookie (__Host-emrelia_session) after you sign in to your account, which expires after 30 days or when you sign out. We use no advertising or cross-site tracking cookies. Cloudflare Turnstile and the Lemon Squeezy checkout may set their own strictly necessary storage while you use them; each is governed by its provider's privacy policy.

Why we process it

We process this data to deliver what you asked for (the waitlist announcement, your purchase, your account), to enforce license terms, and to keep the site secure. Under the EU and UK GDPR our legal bases are performance of a contract, our legitimate interests in operating and securing the service, and, for the waitlist, your consent.

Where it lives

The site and our services run on Cloudflare. Commerce data lives with Lemon Squeezy. Sign-in emails are delivered via Resend. Each processes data under its own privacy terms as our service providers. We are based in the United States and our providers may process data there; where required, transfers from the EU or UK rely on our providers' standard contractual clauses.

How long we keep it

  • Sign-in links expire after 15 minutes, waitlist confirmation links after 24 hours, and sessions after 30 days.
  • Rate-limit counters are deleted within a day.
  • License deactivation history is deleted after 31 days.
  • Account sign-in records are deleted automatically once all your sessions have expired; signing in again recreates them. You can also request deletion at any time (below).
  • Order records held by the merchant of record are retained as required for tax and accounting.

Your rights and choices

You can unsubscribe from emails at any time, and you can ask us to access, correct, export, or delete your account and associated data by writing to [email protected]. If you are in the EU or UK you also have the right to object to or restrict processing and to complain to your data protection authority. If you are a California resident, the rights above cover your rights to know, delete, and correct under the CCPA/CPRA; we do not sell or share personal information as those terms are defined there, and we will not discriminate against you for exercising your rights. We respond to requests within 30 days.

Children

The site and the software are not directed to children under 16, and we do not knowingly collect their data.

Changes

We may update this policy; the date above changes when we do. Material changes will be announced to your purchase email.