Privacy policy
Last updated: 21 October 2026
This policy explains what personal data we process on this online store: on the Pato waitlist and in site statistics. We are not selling or charging anything yet; before sales open, we will update this policy. It is written for the GDPR (Regulation (EU) 2016/679) and Portuguese Law 58/2019. Cookies are explained in detail in the cookie policy.
1. Who is responsible
UB Robotics, Lda, registered office at Rua da Carvalha, 570, 2400-441 Leiria, Portugal, tax number (NIF) 519560230, is the controller of the personal data collected on this store.
For any question about your data, or to exercise your rights, write to info@ubrobotics.com.
2. What we collect
Waitlist:
- name, email, country, whether you are an individual, a school/university/lab or a company, and how many ducks you expect to want;
- the form language, the date and time you gave consent and, if you came through a campaign, its parameters (utm_source, utm_medium, utm_campaign…);
- to check the address can receive mail, we look up the DNS of your email domain (for example, whether “example.com” has a mail server). Nothing is sent to your mailbox for this.
Site statistics (PostHog, hosted in the EU): pages viewed, clicks, referring page, device and browser type, and approximate location (country/city) derived from your IP address, linked by a random identifier stored in a cookie and in your browser’s local storage. PostHog may also record the session (session replay): what appears on screen, movements and clicks, with text typed into form fields masked. Details in the cookie policy.
Waitlist sign-up: the server sends PostHog an event with the sign-up type, quantity, country, language and campaign, linked to an identifier that includes your email. Your browser then uses the same identifier, so statistics from your visits, including earlier ones in that browser, are linked to your sign-up.
Technical logs: our host (Vercel) logs requests to the site (IP address, browser, page, time) for security and troubleshooting, and measures page performance (Speed Insights) without cookies.
Emails you send us: whatever you write to info@ubrobotics.com, so we can reply.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Waitlist: confirm your sign-up, email you Pato news and when ordering becomes possible, and talk to you about larger requests (schools and companies) | Consent, given in the form checkbox |
| Site statistics and session recording, sign-up event, technical logs, abuse prevention (email domain check, anti-bot filters) | Legitimate interest: understanding how the store is used, improving and protecting it |
| Answering requests; defending rights in disputes | Legitimate interest and legal obligation |
We make no automated decisions with legal effects on you and do no advertising profiling. We do not sell personal data. Joining the waitlist is optional.
4. Who we share it with
We use these providers, who process the data on our behalf and under our instructions (processors):
| Provider | What for | What data |
|---|---|---|
| Supabase | Waitlist database | The waitlist data (section 2) |
| Resend | Sending emails (sign-up confirmation, updates) | Name, email, email content |
| PostHog (EU cloud) | Statistics and session recording | See section 2 and the cookie policy |
| Vercel | Site hosting, technical logs, Speed Insights | IP address, requests to the site, data passing through the server |
Our mailbox provider (info@ubrobotics.com) and public authorities, where the law requires it, may also receive data.
If the page has YouTube videos, they load only when you press play; from then on Google (YouTube) receives your IP address and browser data under its own policy.
5. Transfers outside the European Economic Area
PostHog stores statistics in the EU and the site runs on Vercel servers in the EU (Dublin). Some providers are US-based companies (Vercel, Resend, Supabase) and may access data from there. In those cases the transfer is covered by the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, where the provider is certified, or by standard contractual clauses approved by the Commission.
6. How long we keep it
- Waitlist: until you ask to leave or withdraw consent, and at most 2 years after you signed up.
- Statistics in PostHog: up to 12 months. Session recordings: up to 30 days.
- Vercel technical logs: for a short period set by Vercel.
- Emails exchanged with us: as long as needed to deal with the matter.
7. Your rights
At any time and free of charge, you can:
- find out what data we hold about you and get a copy (access);
- correct wrong or incomplete data (rectification);
- ask us to delete it (erasure);
- ask us to stop using it while an issue is resolved (restriction);
- receive the data you gave us in a commonly used format, or have us send it to someone else (portability);
- object to processing based on legitimate interest (objection);
- withdraw consent, without affecting what was done before.
To do so, write to info@ubrobotics.com. We reply within one month (extendable by two more in complex cases, with notice). We may ask you to confirm your identity, for example by replying from the email you signed up with.
If you think we have not handled your data properly, you can complain to the Portuguese data protection authority (CNPD), at www.cnpd.pt, or to the supervisory authority of the EU country where you live or work.
8. Children
Pato is for ages 14 and up. Under 13, joining the waitlist needs the permission of whoever holds parental responsibility (art. 16 of Portuguese Law 58/2019).
9. Security
Waitlist data is in a database only the store’s server can access. All communication with the site is encrypted (HTTPS).
10. Changes
If we change this policy, we publish the new version here with its update date. If a change significantly affects data you have already given us, we tell you by email.