Privacy Policy
Effective 4 September 2026
Who we are
Keutho is a pre-launch hardware project building a privacy-first video doorbell. We are not yet incorporated, so there is no company registration to cite. For anything in this policy, write to privacy@keutho.com and a person will read it.
For the purposes of the UK and EU GDPR, Keutho is the data controller for the information described below.
What we collect
Your email address
Only when you type it into the waitlist form and submit it. We do not ask for your name, your phone number, your address, or anything else, and there is nowhere on this site to give them to us.
The form posts to our own server and nowhere else. There is no third-party form service sitting in the middle. The form also carries a hidden field that humans never see; submissions that fill it in are treated as bots and discarded without being stored.
Ordinary server records
Like every website, ours runs on servers that keep short-lived technical logs: IP address, browser user-agent, the page requested, and a timestamp. These are generated and held by our hosting provider to deliver the site and defend it from abuse. We do not build profiles from them, and we do not connect them to waitlist signups.
What we do not collect
- No cookies. This site sets none, of any kind, including "essential" ones.
- No analytics. We do not know how many people visit, or which pages they read.
- No tracking pixels, session recording, heatmaps, or device fingerprinting.
- No advertising networks and no data brokers.
- No account, no password, no payment details. There is nothing to buy yet.
This is enforced in the site's Content Security Policy, not only promised in prose: the browser is instructed to refuse scripts and network connections from anywhere but our own domain.
Why we are allowed to hold it
Under the UK and EU GDPR we need a lawful basis for each use:
- Your email address: consent (Article 6(1)(a)). You gave it to us by choosing to submit the form. You can withdraw that consent at any time, and we will delete the address.
- Server logs: legitimate interests (Article 6(1)(f)). Keeping the site available and resistant to attack. We have weighed this against your privacy and kept the data minimal and short-lived.
What we use your email for
To tell you when Keutho units are available to buy, and to send the occasional product update: progress on the hardware, decisions we have made, that kind of thing. Infrequent, and always with a one-click unsubscribe link.
We do not use your email for anything else. No third-party marketing, no lookalike audiences, no enrichment against other datasets.
Who else touches it
We use three service providers. They process data on our instructions and are not permitted to use it for their own purposes.
| Provider | What it does | What it sees |
|---|---|---|
| Cloudflare, Inc. (US) | Hosts and delivers this website | Server logs, including your IP address |
| Notion Labs, Inc. (US) | Stores our waitlist | Your email address |
| Resend (US) | Delivers our email | Your email address |
That is the complete list. Our blog content is pulled from a content management system when the site is built, on our own machines. Your browser never contacts it.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined by California law. We have never done either and have no plans to.
We may disclose information if we are legally compelled to. If that ever happens and we are permitted to tell you, we will.
Where it goes
Our providers are based in the United States, so if you are in the UK or the EEA your email address is transferred outside your country. Those transfers rely on the appropriate safeguards under the GDPR: Standard Contractual Clauses, and the EU-US and UK-US Data Privacy Framework where the provider is certified.
How long we keep it
Your email address stays on the waitlist until you ask us to remove it, or until we retire the waitlist, whichever comes first. If the project does not ship, we delete the list rather than keep it. Server logs are held briefly by our host under its own retention schedule.
Your rights
If you are in the UK or the EEA, you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw your consent at any time. You also have the right to complain to your data protection authority. In the UK, that is the Information Commissioner's Office.
If you are in California, you have the right to know what we collect and why, to have it deleted, to have it corrected, to opt out of the sale or sharing of your personal information (we do neither), and to limit the use of sensitive personal information (we collect none). We will not discriminate against you for exercising any of these rights.
To use any of them, email privacy@keutho.com. We do not charge for this, and we will not make you create an account to ask. We respond within 30 days under the GDPR and within 45 days under California law, and usually much sooner. Because an email address is all we hold, we verify a request by replying to the address it concerns.
Do Not Track and Global Privacy Control
We do not track you across websites, so there is nothing for these signals to switch off here. We honour them in the only way that means anything: by not collecting the data in the first place.
Children
This site is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us an email address, write to us and we will delete it.
How we protect it
The site is served over HTTPS, so everything between your browser and us is encrypted in transit. The keys our systems use are held as runtime secrets and never appear in our source code. The strongest protection, though, is that we collect almost nothing. A list of email addresses and nothing else is a small thing to lose.
About the doorbell
No Keutho device has shipped yet, so this policy covers this website only. The product is designed so that footage is encrypted before it leaves your door and we never hold the key, but a design is not a running service, and we are not going to make promises here about a system you cannot yet hold in your hands. A separate product privacy policy will be published before the first unit ships, and we will send it to you.
Changes to this policy
If we change how we handle your information, we will update this page and move the effective date at the top. For anything material, such as a new provider or a new use of your email, we will tell the waitlist directly rather than quietly editing the page.