Privacy and cookie policy
Last updated: 17 June 2026
This policy explains how we handle personal data when you visit and use the EventHorizon waitlist website at eventhorizon.qed42.net (the "website"). It also describes the cookies and similar technologies the website uses.
This policy covers the waitlist website only. It does not describe how the EventHorizon product you are joining the waitlist for handles any code, repositories, or other data you may submit to that product once it launches. EventHorizon is named here only as the product you are joining the waitlist for. This document is not the product's privacy notice and it is not a data processing agreement.
Who we are
QED42 Engineering Pvt. Ltd. ("QED42", "we", "us", "our") operates this website and decides how and why the personal data described here is processed. For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, QED42 is the data controller for personal data collected through this website.
If you have a question about this policy or about how we use your data, email us at business@qed42.com.
What we collect
We collect three kinds of information through this website.
1. Waitlist form data
When you join the waitlist, the only detail you enter is your work email address. When you submit the form, your browser and our server also send a small amount of attribution and technical metadata, which we forward to our customer relationship management (CRM) provider, HubSpot, so we can record your place on the list, contact you about EventHorizon, and understand which campaigns bring people to the waitlist:
- your work email address;
- the page you submitted from and its title;
- the page or campaign that referred you (the referrer URL) and any UTM campaign parameters in the link you followed, such as utm_source, utm_medium, utm_campaign, utm_term, and utm_content;
- your IP address, which HubSpot uses to attribute an approximate location to the signup; and
- the HubSpot visitor cookie (hubspotutk), only if your browser already has one and you have accepted marketing cookies. This site does not set that cookie itself.
We do not ask for your name, your company, or your job title on this website.
2. Analytics and session data
When you accept analytics cookies, we use the following services to understand how people find and use the website:
- Google Analytics 4 (GA4) records page views, sessions, and events. It records a "sign up" event when you successfully join the waitlist so we can measure how well the page works.
- Microsoft Clarity records session replays and heatmaps so we can see how visitors move through the pages, and it records a "waitlist signup" event when you join. Clarity masks text you type into form fields by default, so it does not record what you enter.
We also use Vercel Analytics and Vercel Speed Insights to measure page performance, loading speed, and Core Web Vitals. These are cookieless: they store no cookies or persistent identifiers on your device, so they run under our legitimate interest in keeping the site fast and stable rather than requiring consent.
These analytics services may process data such as your approximate location (derived from your IP address), device and browser type, the pages you view, and how you interact with them.
3. Anti-abuse and security data
To keep the waitlist form working for genuine visitors and to prevent automated abuse, we use IP-based rate limiting. We count how many submissions come from your network address over a short window (currently five submissions every ten minutes) to limit how often any single source can submit it. This count runs in our server's memory only, and we do not store your IP address in a database for it.
The form also includes a hidden field that genuine visitors never see or fill in. It helps us discard automated submissions and collects no personal data.
As noted above, your IP address is also sent to HubSpot with your signup so HubSpot can attribute an approximate location. Aside from that and the short rate-limiting window, we do not retain your IP address after your request is handled.
Legal bases for processing
We rely on the following legal bases under the GDPR and the UK GDPR.
| What we process | Legal basis |
|---|---|
| Analytics and session recording (Google Analytics 4, Microsoft Clarity) | Your consent, which you can give or withdraw at any time through the cookie banner. |
| The HubSpot visitor cookie (hubspotutk) used for marketing attribution | Your consent. |
| Cookieless performance measurement (Vercel Analytics and Speed Insights) | Our legitimate interest in keeping the website fast and stable. No cookies are set. |
| Recording and managing your waitlist signup (your work email and the attribution metadata, including the IP address sent to HubSpot) and contacting you about EventHorizon | Taking steps at your request before entering into a contract, and our legitimate interest in building and communicating with the waitlist for a product we are preparing to launch. |
| IP-based rate limiting and hidden-field spam filtering | Our legitimate interest in protecting the website and the form from automated abuse, spam, and fraud. |
Where we rely on legitimate interest, we have weighed our interest against your rights and consider the processing limited and reasonable. You can object to processing based on legitimate interest at any time (see "Your rights" below).
Cookies and similar technologies
The website uses cookies and similar technologies for three purposes: to make the site and the form work, to measure how the site is used, and to attribute waitlist signups to marketing campaigns. We group them into three categories:
- Strictly necessary. Needed for the site and the form to work. These do not require your consent.
- Analytics. Help us understand how the site is used. We set these only after you accept analytics cookies.
- Marketing. Help us link a signup to the campaign that brought you here. We use these only after you accept marketing cookies.
When you first visit, all analytics and marketing cookies are switched off by default. Choosing "Accept all" in the cookie banner turns on analytics and marketing cookies together, and "Reject" keeps both off. For Google Analytics we use Consent Mode, so Google's tags start in a denied state and write no analytics cookies until you consent. Microsoft Clarity does not load at all until you accept.
You can change or withdraw your cookie choices at any time using the "Cookie preferences" control in the site footer. Withdrawing consent does not affect any processing we carried out while your consent was active.
| Cookie or technology | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| _ga, _ga_* | Google Analytics 4 (Google LLC) | Distinguishes visitors and keeps session state so we can measure page views, sessions, and the waitlist signup event. | Up to 2 years | Analytics |
| _clck, _clsk | Microsoft Clarity (Microsoft Corporation) | Keeps a Clarity user and session identifier so repeat sessions can be linked for heatmaps and session replay. | Up to 1 year | Analytics |
| MUID | Microsoft Clarity (Microsoft Corporation) | Identifies a unique browser to Microsoft so Clarity can recognise returning visitors. | Up to 1 year | Analytics |
| hubspotutk | HubSpot, Inc. | Set by HubSpot, not by this site. If it is already present and you accept marketing cookies, we forward it with your signup so HubSpot can link the signup to your visitor session. | 6 months | Marketing |
| Vercel Analytics and Speed Insights | Vercel Inc. | Measures page performance and Core Web Vitals using cookieless beacons. No cookies or persistent identifiers are stored on your device. | No cookie stored | Strictly necessary |
| IP-based rate limiting | EventHorizon waitlist (hosted on Vercel) | Counts submissions per network address in server memory only to prevent form abuse. No cookie is stored on your device. | In memory only, up to 30 minutes | Strictly necessary |
Third-party processors and international transfers
We use the following third parties to provide parts of this website. Each handles data under its own terms and privacy notice.
| Provider | What it does for us |
|---|---|
| HubSpot, Inc. | Stores your waitlist signup in our CRM and provides the marketing attribution cookie. |
| Google LLC | Provides Google Analytics 4. |
| Microsoft Corporation | Provides Microsoft Clarity session replay and heatmaps. |
| Vercel Inc. | Hosts the website and provides cookieless Vercel Analytics and Speed Insights. |
Some of these providers are based outside the UK and the European Economic Area, including in the United States. Where your data is transferred outside the UK or the EEA, we rely on appropriate safeguards recognised under the GDPR and the UK GDPR, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and, where applicable, the EU-US Data Privacy Framework and its UK extension. You can ask us for more detail about the safeguards that apply to a given transfer.
How long we keep data
- Waitlist signup data in HubSpot. We keep this until you ask us to delete it, or until up to twelve months after the waitlist closes and EventHorizon has launched, whichever comes first. If you become a customer or keep hearing from us with your consent, we may keep relevant contact data for longer under a separate notice we provide at that time.
- Analytics and session data. We keep this for the standard retention periods of each provider, typically up to fourteen months for Google Analytics and shorter for Microsoft Clarity. We can adjust these settings and will reflect any material change here.
- Anti-abuse data. The IP address used for rate limiting stays in our server's memory only for the short rate-limiting window and is not written to a database. The IP address sent to HubSpot with your signup is kept as part of your HubSpot contact record under the waitlist retention period above.
These periods are our current approach rather than fixed legal guarantees, and we may shorten or extend them where the law requires or allows it.
Your rights
Under the GDPR and the UK GDPR you have the following rights over your personal data. You can:
- Access: ask for a copy of the personal data we hold about you.
- Rectification: ask us to correct data that is wrong or incomplete.
- Erasure: ask us to delete your data in certain circumstances.
- Restriction: ask us to limit how we use your data in certain circumstances.
- Portability: ask us to provide certain data to you, or to another controller, in a structured, commonly used, machine-readable format.
- Objection: object to processing we base on legitimate interest, and object at any time to use of your data for direct marketing.
- Withdraw consent: withdraw your consent for analytics and marketing cookies at any time, without affecting processing that already took place.
- Complain: lodge a complaint with a data protection supervisory authority (see below).
We will not charge you for exercising these rights in most cases, and we will respond within the time the law allows, normally one month.
You can lodge a complaint with a data protection supervisory authority. In the UK this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EU you can contact the authority in the country where you live or work.
How to exercise your rights and change your preferences
To exercise any of the rights above, email us at business@qed42.com. We may ask you to confirm your identity before we act on a request, so we release data only to the right person.
To change your cookie choices, open the "Cookie preferences" control in the site footer and update your selection. Your browser settings also let you block or delete cookies, though doing so may affect how parts of the site work.
Changes to this policy
We may update this policy from time to time, for example when we add or remove a service or when the law changes. When we make a material change, we will update the "Last updated" date at the top of this page. Please check back so you stay informed about how we handle your data.