Privacy policy

Last updated 2026-10-27. This page covers the website mentalpin.com. The Mental Pin app will have its own privacy policy before it is released; it handles health-related data and needs separate care.

Who we are

The controller of your personal data on this website is MentalPin OÜ, registry code 16404018, Vana-Kalamaja tn 45-7, 10415 Tallinn, Estonia. You can reach us at [email protected].

What we collect, and why

We only ask for what the form needs. Nothing on this website is sent anywhere without your own action.

WaitlistYour name, your email, the time you signed up, and the consent text you agreed to. We use it to contact you about access to Mental Pin.Legal basis: your consent (GDPR article 6(1)(a)). You can withdraw it at any time.

Contact formYour name, your email, your message, and the time you sent it. We use it to answer you.Legal basis: our legitimate interest in answering a message you sent us (GDPR article 6(1)(f)).

Spam protection, both formsA one-way hash of your IP address and the current hour, kept for up to two hours, so that one address can send at most five submissions an hour. We do not store your IP address itself.Legal basis: our legitimate interest in keeping the site working (GDPR article 6(1)(f)).

We do not collect health data on this website.

If you signed up earlier

If you joined the Mental Pin waitlist on our previous website (2021 to 2023), we still have your name and email. Before we contact you about Mental Pin again, we will send you one message asking you to confirm that you still want to hear from us. If you do not confirm, we delete your entry.

Cookies and tracking

This website sets no cookies and uses no analytics, advertising or tracking scripts. The pages load nothing from third-party servers.

Who processes your data

Cloudflare, Inc. hosts this website and stores form submissions in a database with EU jurisdiction (Cloudflare Pages and D1). While serving the site, Cloudflare also sees technical request data such as your IP address.
Messages to [email protected] are delivered through our email hosting provider and read by us in our mailboxes.
We do not sell your data, we do not use it for advertising, and we do not share it with anyone else unless the law requires it.
Cloudflare is a US company. Where data leaves the EU/EEA, the transfer is covered by Cloudflare's data processing addendum, which relies on the EU-US Data Privacy Framework and the EU standard contractual clauses.

How long we keep it

Waitlist: Until you get access to Mental Pin or ask us to remove you, and in any case no longer than 12 months after the beta launch.
Contact messages: 12 months after the last message in the conversation.
Spam-protection hash: Up to two hours.

Your rights

You can ask us at any time to show you the data we hold about you, correct it, delete it, restrict how we use it, or give it to you in a portable form. You can withdraw your consent whenever you like, and you can leave the waitlist by writing to [email protected]. Withdrawing consent does not affect what we did before.

You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

Children

This website is not for children under 13, and we do not knowingly collect their data. If you believe a child has sent us something, write to [email protected] and we will delete it.

Changes

When we change this policy, we update the date at the top. If a change affects how we use your waitlist data, we will ask for your consent again.