Privacy
What this site collects, and why.
Last updated 22 October 2026.
This site exists to find out whether teams want TwinDragon. It collects the minimum needed to answer that question and to contact the people who asked to be contacted. This page describes exactly what happens with your data. It is written to be read, not to be scrolled past.
Who is responsible
The data controller is TwinDragon (legal entity to be completed). For any request about your data, write to the contact address in the site footer.
What we collect when you register interest
Only what the form asks: your work email; your role; your company size in developers; the coding agents you use; how you pay for them; how often you hit a usage limit or lose context between sessions; what you would try first; whether you would join a 20-minute interview and whether you would join a paid pilot; and your consent, with the time you gave it.
With it we store: the letter (A, B or C) of the headline you saw on the page, the campaign parameters of the link you arrived through (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the address of the page that referred you if your browser sends it, the time of submission, and the anonymous analytics identifier of the page view that led to the form, so we can count which channel brings people who register. We do not store your IP address in the lead table, and we do not ask for your name.
Why, and on what legal basis
Purpose: to decide which teams to invite to interviews and to the first pilots, and to tell the people who registered when there is something concrete (pilot slots, benchmark results, a question only they can answer). Legal basis: your consent (GDPR Art. 6(1)(a)), given with the checkbox on the form. We use double opt-in: after you submit, we send one email asking you to confirm; if you do not confirm, we do not write to you again. Every email we send carries an unsubscribe link that works with one click. You can also withdraw by writing to the contact address in the site footer. Withdrawing does not affect what happened before.
Analytics, without cookies
We use PostHog to count visits and to see which page sections and headlines work. It runs in cookieless mode: it keeps its identifier in memory for the duration of a page load and stores nothing in your browser. The events we record are: page view, which headline variant was shown, form started, form submitted, interview booked. Each carries the campaign parameters of the link you arrived through. Our PostHog project is configured to discard IP addresses on receipt. There is no session recording, no autocapture of clicks, and no cross-site tracking.
Cookies
This site sets one cookie, td_variant. It holds a single letter (A, B or C) so the headline you saw stays the same if you reload the page. It contains no identifier, is never sent to any third party, and expires when you close your browser. It is strictly necessary for the page to work consistently, which is why there is no cookie banner. We set no other cookies.
The thank-you page embeds a Cal.com calendar so you can book the interview. That calendar is served by Cal.com and is subject to Cal.com's own privacy policy; it loads only on the thank-you page, after you have registered.
Who processes the data for us
Vercel (hosting and the daily export job), Supabase (the database holding the lead table), PostHog (analytics), Resend (sending the confirmation and any later emails) and Cal.com (interview scheduling). Each acts on our instructions under a data processing agreement. We choose European regions where the provider offers them (Supabase, PostHog EU cloud, Vercel). We sell nothing and share your data with no one else.
How long we keep it
Your answers stay in the lead table for 24 months from your last interaction with us, or until you withdraw consent or ask for erasure, whichever comes first. Analytics events carry no personal identifier and are kept in aggregate.
Your rights
You can ask for access to your data, correction, erasure, restriction, portability, and you can object to processing or withdraw consent at any time, all by writing to the contact address in the site footer. We answer within one month. If you think we handled your data wrongly, you can complain to the supervisory authority of the country you live in.
Children
This site is addressed to professionals and is not intended for anyone under 16.
Changes
If this page changes, the date at the top changes with it. Changes that affect how we use data you already gave us will be sent to you by email first.