Legal Notice

SweatPotatoes: who publishes this site, who hosts it, and what it keeps of your visit.

Last updated: 11 September 2026

This page is about this website, sweatpotatoes.app: the home page, the waiting list, the call booking and the invitation page. The mobile app has its own documents, the Terms of Service and the Privacy Policy, and those are the ones that apply the moment you have an account. Neither replaces the other: what you read here says nothing about what happens inside the app, and the other way around.

1. The publisher

This site is published by Thomas Viot, sole trader (micro-enterprise) trading as Serviprog, registered at 19 chemin des Mûriers, 66680 Canohès, France.

• Company registration (SIREN): 930 679 204
• VAT number: FR03930679204
• Publication director: Thomas Viot
• Contact: contact@sweatpotatoes.app

2. The host

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States, vercel.com. Its servers answer when you open a page; its technical logs and its page count are described in section 4.

Three other services are involved, each for one thing, and each described in section 4: Supabase (European Union, Ireland) keeps the waiting list, Resend (United States) delivers the call request email, PostHog (European Union) receives the statistics if you allowed them. Transfers outside the European Union are covered by the European Commission's standard contractual clauses.

3. Intellectual property

The SweatPotatoes name, the logo, the illustrations, potatoes included, the copy and the code of this site are protected by copyright and trademark law. Reproducing or displaying any of it, in whole or in part, requires our prior written agreement. Short quotations with a link back to the original page remain free.

The Host Grotesk and Bricolage Grotesque typefaces are distributed under an open font licence by their authors, and served from this domain. App Store, Apple and Google Play are trademarks of their respective owners.

4. What this site collects

Thomas Viot is the data controller for the data described here, within the meaning of the General Data Protection Regulation (GDPR). Here, one by one, is every place where this site learns something about you.

The waiting list

When you ask for an invite, the site records your email address, the language of the page, where on the page you clicked from, the platform you picked (iPhone or Android) and, if you ticked the box, your agreement to hear from us. The row is written at Supabase, in the European Union (Ireland). It does one thing: send you your beta invite, and the occasional news if you asked for it. Legal basis: steps taken at your request before an account exists, and your consent for the news.

The call booking

When you book a call, the site takes your first name if you write one (the field is optional), your email address, the day and time slot you picked, your time zone if it is not Paris, and which page you booked from. None of it goes into a database: the whole thing leaves in an email, sent through Resend, to contact@sweatpotatoes.app. Your address is set as the reply-to, so replying to that email is enough to confirm the call. Legal basis: your consent, given by pressing the button.

The statistics

If you answered "Go ahead" to the banner, the site sends PostHog, on its European instance, pseudonymous events: which page you are looking at, which button you pressed, at which step you closed a dialog, and where your click landed. Every property on an event is a value from a fixed list, a count or a yes/no. Nothing you type is ever sent: not your email address, not your first name. Events travel through this domain's /ingest path before being forwarded to PostHog, so ad blockers do not cut them by name. With the same permission, PostHog also records your browsing session (pages, clicks and scrolling) to help us understand usability issues. Input fields are masked before transmission; console logs, request headers and request bodies are not recorded. Withdrawing permission stops both analytics and session recording. Legal basis: your consent, which you can withdraw at any time.

The page count

On every page, whether or not you answered the banner, Vercel Web Analytics counts the visit: the page you opened (the code in an invitation link is removed from the address before sending), the site you came from, the country, region and city deduced from your connection, the type of device, the operating system and the browser, with their versions. Nothing is written on your device: no cookie, no line in local storage. To tell one visitor from another over the course of a day, Vercel computes a hash from the technical details of the request; that hash is erased after 24 hours, and neither your IP address nor any identifier is kept. All that remains is anonymous figures: how many visits, on which pages, coming from where. Legal basis: our legitimate interest in knowing how many people visit the site and what they look at.

The host's logs

Vercel keeps technical request logs (IP address, timestamps, requested page, errors) to serve the site and investigate incidents and abuse. Legal basis: our legitimate interest in a site that works.

What there is none of

No advertising, no resale, no sharing for advertising purposes. No social network buttons, no ad-network pixels, no tracking from one site to the next. Fonts are served from this domain: your browser never talks to Google to open this page.

5. Cookies

Until you answer the banner, this site drops nothing: no cookie, no line in your browser's storage. That is what the banner is for, and nothing that writes to your browser is loaded ahead of it. The page count described in section 4 writes nothing at all, which is why it does not wait for your answer.

• If you accept, PostHog writes an analytics cookie and a line in local storage, both valid for 12 months, used to recognise the same browser from one visit to the next.
• If you refuse, your refusal stays on your device, in local storage, under the key sweatpotatoes.analytics. It goes nowhere: it exists so the question is not asked again on every page.

The Cookies link at the bottom of every page reopens the banner. Changing your mind should be as easy as saying yes was, and withdrawing your consent also erases the identifier PostHog had written on this browser.

6. How long we keep it

• The waiting list signup: until the app opens publicly, and at most three years after we last heard from each other.
• The call request email: twelve months after the call.
• The statistics: thirteen months, the retention the French data protection authority recommends for audience measurement.
• The page count: the day's hash, 24 hours; the figures that remain are anonymous.
• The host's technical logs: up to twelve months.

7. Your rights

Under the GDPR you can ask for access to what we hold about you, its correction, its erasure or its portability, a restriction of processing, and you can object to anything resting on our legitimate interest. Consent you gave can be withdrawn whenever you want, without unsettling what was done before.

Write to contact@sweatpotatoes.app and we will answer within a month. To leave the waiting list, an email is enough: the row is deleted, not set aside.

If you believe we handled your data badly, you can complain to the CNIL (3 place de Fontenoy, 75007 Paris, France, www.cnil.fr) or to the supervisory authority of the country you live in.

8. Links to the app

This site links out to the App Store and to Google Play. The download then happens at Apple or at Google, under their own terms, and using the app is governed by its Terms of Service and its Privacy Policy.

9. Reporting something

Content you think should come down, a dead link, a mistake on this page: write to contact@sweatpotatoes.app. We may change this notice; the date at the top always says when the version you are reading was written.

Thomas Viot, 19 chemin des Mûriers, 66680 Canohès, France. contact@sweatpotatoes.app.