Clear data boundaries.

Who is responsible

DualOS is an independent project run by Gvidas Gružinskas in Lithuania.

For anything concerning your data — access, correction, deletion, or withdrawing consent — write to hello@dualos.app. I read these myself and respond within 30 days.

Waitlist information

The signup form stores your email address, an optional first name, the time you consented to product updates, whether you asked to test early builds, and the signup source.

Testing information

If you are invited to test an early build, technical setup details will be requested separately at that point — things like operating-system versions, GPU, display configuration and scaling, Mac model and chip, and network type. That form does not exist yet. DualOS does not request device serial numbers, exact IP addresses or MAC addresses.

Contributor introductions

If you get in touch about contributing, the site stores your name, email address, an optional public profile link, the open problems you select, any other focus you describe, your stated availability, your product feedback, and the time you consented.

How the information is used

• To send occasional project updates and early-access invitations.
• To understand which workflows and hardware matter most.
• To select focused testing groups.
• To evaluate contributor introductions.

Legal basis

All of the above is processed on the basis of your consent, given when you submit a form. You can withdraw that consent at any time. Withdrawing it does not affect processing that already took place.

Email delivery

Emails are sent through Amazon SES in the eu-north-1 region in Stockholm, Sweden. While that account is still being approved for general sending, delivery falls back to Resend, Inc. (United States), which is certified under the EU–US Data Privacy Framework. Your email address and the message needed to deliver it are shared with whichever service handles it.

All DualOS email comes from hello@dualos.app.

DualOS does not add tracking pixels or click tracking. Images in emails are static and identical for every recipient, and links are not rewritten. Every email includes a one-click unsubscribe header.

When you unsubscribe, your waitlist record, any testing details and individual delivery records are deleted. Only an anonymous unsubscribe event is kept, for the aggregate count.

Analytics

The site uses its own first-party analytics to count visits, page views, referral domains and completed forms. There is no third-party analytics service.

Visiting this site sets no cookies at all. Repeat visits within a day are recognised through a value computed on the server from a rotating daily salt, your IP address and your browser user-agent. The IP address and user-agent are never stored, and the salt is discarded every 24 hours, after which the value cannot be traced back to anyone. Nothing is written to your device.

Full referring URLs, advertising identifiers and cross-site activity are not stored — only the referring domain is kept. Known automated traffic is filtered, and if your browser sends Do Not Track, nothing is recorded at all. Analytics data is never linked to an email address, and is not shared or sold.

Server logs

The web server keeps standard access logs containing IP address, browser user-agent and referrer. These are used only for security and fault diagnosis, and are deleted after 14 days. They are separate from analytics and are not linked to any form submission.

Where the data is held

The site and its database run on a server operated by me in Lithuania. There is no content delivery network and no third-party hosting provider. The external processors are Amazon Web Services (Amazon SES) and Resend, Inc., as described above.

Retention

• Waitlist and testing information: up to 24 months after the last meaningful project interaction.
• Contributor introductions: up to 12 months.
• Analytics records: up to 14 months.
• Server logs: 14 days.

Your rights

You can ask me to:

• give you a copy of the data held about you,
• correct anything that is wrong,
• delete it,
• restrict or object to how it is used,
• send it to you in a portable format,
• withdraw your consent.

Write to hello@dualos.app. You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate — Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt.

Website data and product data are separate

Website signup data is kept separately from DualOS product traffic. Diagnostic files are not collected through the waitlist. If diagnostics are needed during testing, the request will explain exactly what is being collected and ask for separate consent.

Product security is separate

DualOS product connections and website data are different systems. During development, first-time DualOS device pairing should only be performed on a trusted network. Product security documentation will be updated before public beta distribution.