Privacy Policy
Last updated: June 18, 2026
What this policy covers
This policy describes what information Driftvoy LLC ("Driftvoy", "we") collects when you use driftvoy.com, why we collect it, who we share it with, and what your rights are.
If you have questions after reading this, see the Contact section at the bottom.
Who we are
Driftvoy LLC is a Wyoming-registered company (USA) that sells prepaid travel eSIM data plans for Japan and Thailand. We are the data controller for the information described below.
Address: Driftvoy LLC, 1501 S Greeley Hwy, Suite C #2093, Cheyenne, WY 82007, USA Contact: service@driftvoy.com
What we collect, and when
We collect different information depending on what you do on the site.
1. When you join the waitlist
- Your email address (required)
- Your primary travel destination (optional — Japan, Thailand, or Both)
- Which page you signed up from (homepage, Japan page, or Thailand page — for our internal analytics)
- A one-way hashed version of your IP address (SHA-256 with a salt) — used to detect abuse and duplicate signups. We do not store your raw IP.
- Your browser's user agent string — used for diagnostics if a signup fails
2. When you send a message via the contact form
- Your name
- Your email address
- The reason for contact (general, partnership, press, privacy, other)
- Your message text
When you submit any form (spam protection)
When you submit the waitlist or contact form, we use Cloudflare Turnstile to confirm you're a human and not an automated bot. Turnstile runs invisibly in the background and may collect technical signals from your browser and device (such as interaction patterns, browser characteristics, and a challenge token) to assess whether the request is automated. Turnstile does not use this information for advertising or cross-site tracking. See Cloudflare's Turnstile Privacy Addendum for details on what Turnstile processes.
3. When you visit any page
- Server logs — request URL, response code, hashed IP, user agent, timestamp. Kept for 30 days for security and debugging, then deleted.
- Plausible Analytics data — page views, country (derived from IP at request time and not stored), referrer, browser, device type. Plausible is cookieless and stores no personal identifiers. Aggregate stats only. We use Plausible because it's GDPR-compliant by design.
We do not use Google Analytics, Meta Pixel, or any advertising tracker.
Why we collect it (legal basis)
| Data | Why | Legal basis |
|---|---|---|
| Waitlist email + destination | To email you at launch and once with an early-access discount, then stop | Your consent when you submit the form |
| Contact form | To reply to your message | Legitimate interest in customer support |
| Hashed IP + user agent | Abuse detection, duplicate signup prevention | Legitimate interest in service integrity |
| Cloudflare Turnstile signals | Bot / spam protection on forms | Legitimate interest in service integrity |
| Server logs | Security, debugging | Legitimate interest in service operation |
| Plausible analytics | Understanding traffic patterns | Legitimate interest in service improvement (no personal data) |
If you're in a jurisdiction that requires explicit consent for legitimate interest processing (EEA, UK), see "EU residents" below — we don't currently serve EU customers.
How long we keep it
| Data | Retention |
|---|---|
| Waitlist email | Until you ask us to delete it, or 24 months after the launch email goes out (whichever is first) |
| Contact form submissions | 12 months after our last reply, then deleted |
| Hashed IP | 12 months |
| Server logs | 30 days |
| Plausible analytics | Aggregate, no personal data stored |
Who we share it with
We share your information only with third parties strictly necessary to operate the service. None of them sell your data or use it for advertising.
- Vercel (USA) — hosts driftvoy.com. Sees request metadata to serve pages.
- Supabase (USA / EU regions; we use US) — stores our waitlist database. Email and hashed IP live here.
- Plausible Analytics (EU, Germany) — page view analytics, cookieless, aggregate. No personal data sent.
- Postmark or Resend (USA) — sends transactional and launch emails. Sees your email address and message content when we email you.
- Cloudflare (USA) — DNS, CDN, and bot protection (Turnstile). Sees request metadata and the technical signals Turnstile uses to tell humans from bots. Governed by Cloudflare's Turnstile Privacy Addendum.
We do not share your data with anyone else, including law enforcement, unless legally compelled by a valid court order or subpoena in a jurisdiction we operate in.
Where your data lives
Driftvoy is a US-based company. Your data is stored on servers in the United States (Vercel + Supabase US regions). We do not currently offer services to residents of the European Economic Area, United Kingdom, or Switzerland — see "EU residents" below.
Your rights
You have the right to:
- Access — request a copy of the data we hold about you
- Correct — ask us to fix incorrect information
- Delete — ask us to delete your data (with limited exceptions for legal record-keeping)
- Withdraw consent — unsubscribe from emails at any time using the link in every email, or by writing to service@driftvoy.com
To exercise any of these rights, email service@driftvoy.com with the subject line PRIVACY REQUEST. We respond within 30 days at no cost.
If you believe we've handled your data unlawfully, you may also lodge a complaint with the data protection authority in your jurisdiction.
Children's privacy
Driftvoy is not directed to children under 16. We do not knowingly collect data from children under 16. If you believe a child has submitted information to us, contact us using the Contact section below and we will delete it.
Cookies
The site uses essential cookies only — session cookies for form state, CSRF protection. See Cookie Policy for details. Plausible Analytics is cookieless. We do not use marketing or tracking cookies.
EU residents
Driftvoy does not currently offer services to residents of the European Economic Area, United Kingdom, or Switzerland. We plan to expand to the EU in 2027 and will appoint an EU Representative under GDPR Article 27 at that time.
If you are an EU resident and have submitted information to us via the waitlist or contact form (for example, while visiting the US), contact us using the Contact section below and we will respond within 30 days as required by GDPR.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. For material changes (new data collected, new third parties, change in retention period), we will email everyone on the waitlist before the change takes effect.
Contact
For any privacy-related question, write to service@driftvoy.com with the subject line PRIVACY REQUEST.
Driftvoy LLC 1501 S Greeley Hwy, Suite C #2093, Cheyenne, WY 82007, USA