Privacy Policy

Last updated: September 3, 2026.

This notice covers the pre-release Overflow website and its early-access waitlist. It does not cover a shipped Overflow product, because the product is not publicly available yet.

What We Collect

When you join the waitlist, we collect the email address you submit. Cloudflare Turnstile may also process device and network signals to protect the form from automated abuse. Cloudflare may retain ordinary request and security logs for the site it hosts.

How the Waitlist Works

The form posts to an Overflow endpoint hosted on Cloudflare. After validation and abuse checks, that endpoint forwards the email address to Resend, which stores the waitlist on Overflow’s behalf. Resend does not run JavaScript on this site.

We use the address to send the promised early-access or launch message and to respond if you contact us about the waitlist. We do not sell waitlist addresses or use them for advertising.

Website Analytics

The website supports cookieless analytics through PostHog to measure page visits and successful waitlist submissions. When enabled, analytics includes page addresses, referral information, browser and device information, and the form’s placement on the page. We do not send the waitlist email address or other form values to PostHog, create person profiles, or record sessions. PostHog processes network information, including the IP address and user agent, to calculate a daily visitor count without storing an analytics cookie or visitor identifier in your browser. Our integration respects your browser’s Do Not Track setting.

Your Choices

To ask what address is stored, correct it, or have it removed from the waitlist, email hello@overflowfs.com. We retain waitlist addresses while the early-access list is active or until deletion is requested.

Service Providers

Cloudflare provides hosting and abuse protection. Resend stores the waitlist and will deliver its email. PostHog provides website analytics through its EU ingestion service when analytics is enabled. These providers may process data in the countries where they operate under their own privacy and security terms.

This notice will be updated if the site starts collecting additional data or the waitlist workflow changes.