Privacy Policy
Modulus is an early-stage study tool built by students. This page explains, in plain language, what we do with the information you give us when you join the early-access waitlist, choose email notifications, or contact us. We collect as little as we can, currently store it in the EU, and never sell it.
1. Who is responsible for your data
Modulus ("we", "us") is the data controller for the information described here. Modulus is an early-stage project run by its founding team. Until a legal entity is incorporated, the founding team acts as the data controller. If you have any question about your data, or want to exercise any of the rights below, email totallymodulus@gmail.com and we will reply.
2. What we collect
We only collect what you choose to type into the early-access form:
- Email address — so we can contact you about your early-access request.
- Your role — student, parent, teacher or school.
- Programme(s) — e.g. IB, A-level, IGCSE.
- School name — optional, and only if you add it.
- What frustrates you about exam prep — optional free text you write.
- What would feel fair to pay — an optional rough range.
- Whether you'd help test early — a yes/no flag.
- Whether you want email notifications — an optional yes/no preference.
- Technical signal — the page that referred you (if any), used to understand where interest comes from.
We do not ask for or want any special-category data (health, religion, and so on). Please don't put any in the free-text box.
3. Why we use it, and our legal basis
We use your information to:
- contact you about your early-access request and launch;
- send optional Modulus email notifications if you separately opt in;
- understand who Modulus is for and what to build first;
- show aggregate, anonymous sign-up counts on our site (never your individual details).
Our legal basis under the GDPR is your consent, given when you tick the required privacy box and submit the form. Optional email notifications use a separate opt-in checkbox. You can withdraw either consent at any time (see section 8).
4. Anti-spam (Cloudflare Turnstile)
To stop bots from flooding the form, we use Cloudflare Turnstile, a privacy-friendly challenge that runs when you submit. It may process limited technical data (such as your IP address and browser signals) solely to tell humans from bots. Turnstile is designed not to track you across sites and does not use this data for advertising. See Cloudflare's privacy notice for details.
5. Who can see it (sub-processors)
We don't sell your data and we don't share it for anyone else's marketing. A small number of trusted providers process it on our behalf:
- Supabase — hosts our database, currently in an EU region, where your sign-up is stored (privacy notice).
- Cloudflare — provides the anti-spam check described above (privacy notice).
Access to the raw sign-up list is restricted to the founding team through authenticated, permission-controlled access.
6. International data transfers
We aim to keep your data in the EU. However, some of our providers (such as Cloudflare) may process limited technical data — for example your IP address during the anti-spam check — on infrastructure outside the European Economic Area. Where that happens, appropriate safeguards (such as the European Commission's standard contractual clauses) are applied in accordance with applicable data-protection law.
7. How long we keep it
We keep your sign-up until Modulus launches and you've decided whether to use it, or until you ask us to delete it — whichever comes first. If the project doesn't go ahead, we delete the waitlist.
8. Your rights
Under the GDPR you can ask us to:
- see a copy of the data we hold about you;
- correct anything that's wrong;
- delete it ("right to be forgotten");
- withdraw your consent, including your optional email-notification opt-in.
To do any of these, email totallymodulus@gmail.com. You also have the right to complain to your local data-protection authority if you think we've mishandled your data.
9. Cookies
This marketing site sets no advertising or tracking cookies. We don't run third-party analytics on it. Apart from strictly-necessary cookies or similar technologies required for security (such as Cloudflare Turnstile, which may set a token while you interact with the form), we use no advertising or analytics cookies. Our separate admin area uses a sign-in session token for the founders only.
10. Children
Modulus is aimed at exam-age students. If you are under the age at which you can consent in your country (16 in much of the EU, lower in some), please ask a parent or guardian before signing up, or have them sign up for you.
11. Changes to this policy
If we change how we handle data, we'll update this page and the date at the top. For anything material, we'll contact affected waitlist members where appropriate.
Questions? Email totallymodulus@gmail.com.