Privacy notice

Who is responsible

Overtake (“we”) is operated by Eastline Consulting, Baranjska ulica 1, 31000 Osijek, Croatia, which is responsible for the personal data described in this notice. You can reach us about privacy at privacy@overtakekit.com.

What we collect

When you join the waitlist we store your email address, the time you signed up and gave consent, the version of this notice shown to you, and whether you confirmed your address.

We also store limited source information: campaign values from the page address (such as utm_source or ref) and the hostname of the site that referred you. Your signup stores its confirmation and removal links only as hashes. The email that carries the links keeps them until it is delivered, or until an unconfirmed signup is deleted after 30 days.

For security and rate limiting we process your IP address and keep it only as a keyed hash. We do not use cookies or other device storage on the waitlist.

Why we use it and on what basis

We use your email address to confirm it, keep your place on the waitlist, and invite you when Overtake is ready. The basis is your consent, which you give when you submit the form.

We use hashed IP addresses and request records to prevent spam, abuse and attacks. The basis is our legitimate interest in keeping the service secure.

We do not sell your data and do not use the waitlist for unrelated marketing.

Service providers

We use Cloudflare for hosting and request delivery, Supabase for database hosting (EU region), and Resend for sending confirmation and waitlist emails.

These providers process information under their own terms and privacy notices. We share only what each needs for its role, for security, and to meet legal obligations.

How long we keep it

Unconfirmed signups are deleted automatically after 30 days. Confirmed signups are kept until you remove yourself, or until 12 months after we send the launch invitation, whichever comes first.

When you remove yourself, we also delete any queued confirmation emails for your address. Rate-limit records are deleted daily.

Your rights

You can withdraw your consent at any time with the removal link in every waitlist email; this deletes your signup.

Depending on where you live, you may also have rights to request access, correction, deletion, restriction or portability of your data, to object to its use, and to complain to a data protection authority.

Security and changes

We use hashed tokens and addresses, private database access, rate limits and encrypted connections to protect your information. No online service can guarantee absolute security.

We may update this notice when the service, our providers or legal requirements change. The version and date below identify the current notice.