Privacy

This page is about the early-access form on this site, and nothing else. It is short because there is very little to describe.

Who is responsible

Pascal Lauener, who builds Pergalino. Write to pascal@lauener.biz about anything on this page.

What happens to your address

It is put in an email and sent to Pascal, and that is the whole mechanism. There is no database. Nothing about you is written to any store this site controls: your address exists in his mailbox, the way it would if you had simply written to him, and nowhere else.

The email carries your address, the date and time, a two-letter country code derived from your connection, and a one-word tag saying which button on the page you used. That is all of it.

Why

To decide whether to give you access to a preview, and to write to you about it. The basis is your consent, given by submitting the form. You can withdraw it by replying to say so, at which point the message is deleted.

What is not stored

• Your IP address.
• Anything about your browser or device.
• The page you came from.
• Cookies. This site sets none at all, of any kind, and carries no analytics script. Visitor numbers come from the host's own traffic statistics, which need no code on the page.

What cannot be claimed

Vercel serves this site and runs the form's endpoint, and records connections, IP address included, in its own logs under its own retention, the way every web host does. Resend carries the email. Neither is something we have a copy of or read. Saying otherwise would be the one false sentence on this page.

Once you are using the app

Everything above is about this page and the form on it. The app itself, at app.pergalino.ch, keeps one record about you: the email address you signed in with, which service it was, and when you last used it. That is the whole of it — a row per account, updated when the app renews its access to your files, which happens when you open it and about once an hour while you have it open.

It exists for one reason: access is invite only with a hard limit on places, and the only alternative to knowing which invitations are being used is guessing. It is not shared with anyone and there is no analytics service involved — the record is written by the same request that hands the app its access to your files, so there is no tracking script anywhere in the app either.

Your notes are not in it and never will be. No titles, no filenames, no counts, nothing about what is in your vault. Your notes are files in your own Google Drive or OneDrive; the app reads them in your browser and this record has nothing to do with them. Ask and the row is deleted.

If you switch the Gmail sync on, the app reads the threads that carry your Pergalino label and writes them into notes in your own vault, in your browser, the same way it reads and writes your notes. No mail passes through or is kept on the server; the record above does not change. Switch it off and nothing is read any more; signing out withdraws the permission at Google.

The spam check

There is no captcha and no third-party script of any kind on this site. The form is protected by a hidden field that automated submissions tend to fill in, and by how long the page was open before you pressed the button. Nothing about either is stored or sent anywhere: they are read once, to decide whether to accept the submission, and then forgotten with the rest of the request.

Who else sees it

Nobody. The address is not shared, not sold, not put on a mailing list, and not sent to any other mailing service. The one exception is the thing you asked for: if you are approved and it is a Google address, it is typed into the Google Cloud console as a test user for the Pergalino OAuth application, because that is what actually grants you access. Google's handling of it is then Google's own. A Microsoft address is not sent anywhere: Microsoft's consent is between you and Microsoft.

How long

Until you have been invited and have signed in, or until you ask for it to be deleted, or twelve months from the day you submitted it, whichever comes first. In practice that means one email in one mailbox, deleted when it has been dealt with.

Your rights

Ask what is stored about you, correct it, or have it deleted. One email, no form and no verification hoop. Deletion is immediate and total: there is one message and it is removed.

Changes

This page is edited by hand when it stops being true, and the date below moves with it.

Last updated 12 October 2026.