Privacy and cookies
Last updated: 31 October 2026
Who is responsible for your data
Kalyma Project, trading as Shot List Lab (Spain) · info@shotlistlab.com
What we collect
- When you join the waitlist: your email, where your persona posts, the image model you use, and the date of your consent.
- If you answer the optional question after signing up: your answer.
- How you reached the page: campaign tags in the link (UTM parameters) and the referring website.
- Aggregate visit statistics (see Cookies below).
Why, and on what basis
We use this data to email you about the Shot List Lab launch and the founding offer, and to understand what people need from the library before we build it. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time by emailing us or using the unsubscribe link in any email. Withdrawing doesn't affect anything done before.
How long we keep it
Until you unsubscribe or ask us to delete it, and in any case no longer than 24 months after you sign up if the product does not launch.
Who processes it for us
- Google (Google Sheets and Apps Script): stores the waitlist.
- Hostinger: hosts this website.
- Cloudflare: cookieless visit statistics.
- Google Analytics: only if you accept analytics cookies.
- When we email the waitlist, we'll use an email provider acting on our behalf.
Some of these providers may process data outside the European Economic Area. Where they do, transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We never sell or share your data with anyone else.
Your rights
You can ask to access, correct, delete or export your data, object to or restrict its use, or withdraw consent: email info@shotlistlab.com. If you think we've handled your data wrongly, you can complain to the Spanish Data Protection Agency (aepd.es).
Cookies
Basic visit statistics come from Cloudflare Web Analytics, which uses no cookies and doesn't identify you. Google Analytics cookies are set only if you click Accept on the cookie banner. You can change your choice at any time: .
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes visitors (only with consent) | 2 years |
| _ga_FQ43E244H6 | Google Analytics | Keeps session state (only with consent) | 2 years |
| sll_consent | Shot List Lab (local storage) | Remembers your cookie choice | 12 months |
| sll_attr, sll_lead | Shot List Lab (session storage) | Keeps the link's campaign tags and your signup reference while you browse | Until you close the tab |