Privacy
What the waitlist keeps, and why
Last updated 2 Nov 2026. Durward is in development and run by Gautam Khosla. Contact: hello@gautamkhosla.com.
What we store when you join
- Your email address, company, role, and what you wrote about your agent (optional, at most 280 characters).
- The exact consent wording shown beside the box, that you ticked it, and the time you joined.
- How you found the page: the link's tag (for example
utm_source=linkedin) or the name of the website that sent you, never the full address of that page.
Joining twice with the same address keeps your first answers and changes nothing.
What we never store
- Your IP address. To limit abuse and to count visits once, the server keeps a one-way key made from your network and the date with a secret value; it cannot be turned back into an address without that secret, and it is deleted at the first visit to a main page, or sign-up, after that day.
- Cookies or anything else on your device. The page sets none and uses no local storage.
- Anything from a third party: no analytics, no trackers, no ads, no outside fonts or scripts. Every file comes from this site. Cloudflare, our host, inserts two scripts of its own into every page, a bot check and its Web Analytics; this site's security policy (script-src 'self') blocks both in your browser, so neither runs and neither collects anything.
Visits
The site counts views per day, page and channel, at most once per page per network per day. Nothing about you is stored with a view.
Why we keep it
To reply to you about the design partner program and to see which channels bring people. Joining means ticking the box, which agrees to emails about the program and the launch, at most two short emails a month, and every email to the list will name Durward, give a mailing address and a contact, and include a way to unsubscribe. Until a mailing address is set up, nothing is sent to the list; we only reply by hand to people who asked. We do not sell, rent or share your details.
Where it is kept
On Cloudflare (Workers and the D1 database), which hosts this site. Request logging in our Worker is switched off, but Cloudflare may still process request data such as IP addresses for its own operation and security, under its own privacy policy. Cloudflare is the only service provider involved.
How long
Until you ask us to delete it, or until the waitlist is closed. The daily network keys are deleted at the first visit to a main page, or sign-up, after their day. After any deletion, the database host's point in time recovery (Cloudflare D1 Time Travel) can still restore an earlier copy for a limited window (7 days on the free plan, 30 on the paid one); we would use it only to undo a mistake of our own, and once that window has passed a deleted row is gone for good.
Your choices
Email hello@gautamkhosla.com from the address you signed up with to see, correct or delete what we hold, or to withdraw consent. Each request is handled by hand and answered within 30 days. If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada.