Privacy note
X PROJECTS ApS (CVR 41736720), c/o Christensen Kjærulff, AIH, Østbanegade 123, 2100 København Ø, Denmark, operates People On Pedals and is the data controller for this intent-validation campaign. General questions, privacy, access, correction, deletion or consent-withdrawal requests can be sent to christian@peopleonpedals.com.
What the form records
Email address, shipping market, motor choice, selected colour, source and UTM attribution, referrer, the required verification consent, any separate optional marketing-updates consent, server timestamps, verification-token hashes and verification status.
Why
To send the double-opt-in message, deduplicate responses and count only verified yeses. If you separately request occasional project updates, the same confirmation link (or a separate confirmation for an already-verified yes) also double-confirms that marketing request. This is intent validation, not a preorder; nothing is due today.
Analytics
Analytics are off unless you choose “Accept analytics.” If accepted, the page sends a deliberately limited event funnel to a new EU-hosted Mixpanel project through our first-party Cloudflare endpoint: page visit, analytics choice, CTA, preference completion, form start and submit, verification, colour choice and sharing. It includes a random pseudonymous browser ID plus first- and last-touch campaign attribution. It never sends your email, name, verification token, full referrer URL, fingerprint, session recording or form contents. “Reject analytics” is equally available, and “Privacy choices” in the footer lets you change the preference later. Rejecting or withdrawing deletes the local analytics ID and attribution.
Processors
Cloudflare serves the site, stores encrypted commitment records in D1 and proxies consented analytics events. AgentMail sends the verification message. Mixpanel processes only consented, pseudonymous analytics in its EU data residency environment. These processors receive only the limited data needed for their role.
Retention and rights
Unverified records are deleted automatically no later than 7 days after submission. Verified commitment records are retained for up to 12 months for campaign validation, then deleted automatically. A confirmed marketing preference is retained until you unsubscribe or it is no longer needed. You may request access, correction, deletion or withdrawal at the address above. Every future marketing email will provide an unsubscribe route before marketing sends begin.
Security
Email addresses are encrypted before storage. Verification tokens are stored only as hashes. Normalized-email and token hashes are unique so submissions and confirmations cannot create duplicate verified yeses.
Last updated 31 August 2026.