Privacy policy

In The Box Drops (intheboxdrops.com) is a product of Proxy Products Inc., a company based in Ontario, Canada. For anything about this policy or your data, email aaron@intheboxdrops.com.

When you join the waitlist we ask for your email address (required) and, optionally, your first name, main DAW, and operating system.

We use this to send you In The Box Weekly (one short inspiration email every Friday) and updates about In The Box Drops, including a welcome email with a link to a short survey, and to understand which tools and platforms to prioritize when curating bundles. The legal basis is your consent, given when you submit the form; you can withdraw it at any time by unsubscribing.

This site keeps no database of its own: the form passes your details directly to our email service and stores nothing else.

We use a small number of service providers, each processing data under its own privacy policy:

• MailerLite (EU): stores the waitlist and sends our emails. Emails include standard open/click tracking and an unsubscribe link.
• Tally (EU): hosts the optional survey; only involved if you choose to take it.
• PostHog (US): anonymous site analytics, described below.
• DreamHost (US): web hosting. Like nearly all web servers, it keeps standard access logs (including IP addresses) for security and operations.

Because some providers operate in the US and EU, your data may be processed outside your own country under those providers’ data-processing agreements.

We use PostHog in a cookieless configuration: no cookies, no localStorage, no fingerprinting, and no session recording. It records anonymous events such as page views and button clicks, and client IP addresses are discarded at ingestion. Nothing is stored on your device, which is why this site has no cookie banner. Analytics data is never sold and is used only to understand whether this page is working.

You can ask us to access, correct, delete, or export the data we hold about you, and you can withdraw consent at any time. The unsubscribe link in any email does this instantly, or you can email us. We respond to requests within 30 days.

If you’re in the EU/EEA or UK, you also have the right to object to or restrict processing, and to lodge a complaint with your local supervisory authority. In Canada, you may complain to the Office of the Privacy Commissioner. For California residents: we do not sell or share personal information as defined by the CCPA/CPRA.

We keep your details until you unsubscribe or ask us to delete them. Unsubscribed addresses may remain on a suppression list so we never email you again by mistake. Survey responses are kept while they’re useful for shaping drops.

This site isn’t directed at children under 16, and we don’t knowingly collect their data.

If this policy changes, we’ll update this page and the date at the top. If a change materially affects how your data is used, we’ll mention it by email.