Skip to content
Serendipi·link
Back to home ES
// 00_LEGAL

Legal Notice & Privacy

This page is the public legal notice and privacy policy for the Serendipilink pre-launch waitlist site. It covers Spanish LSSI 34/2002, EU GDPR 2016/679 and LOPDGDD 3/2018. Last updated: 2026-04-25.

  1. 01Service Provider
  2. 02Privacy Policy
  3. 03Cookies & Local Storage
  4. 04Governing Law
01

Service Provider

Serendipilink is operated under the brand Sideralith as a pre-launch product project. Public commercial activity has not begun yet — when it does, the natural person responsible (autónomo) will publish their full identifying details on this page in accordance with article 10 of LSSI 34/2002.

For any communication regarding this site you can write to legal@serendipilink.com.

Domain: serendipilink.com. Hosting and edge: Cloudflare, Inc. (US, GDPR-adequate via SCCs).

02

Privacy Policy

Controller. The Serendipilink team (operating under the brand Sideralith). Contact for privacy matters: privacy@serendipilink.com.

Data we collect. Only what you submit through the waitlist form: email address, agency name and plan of interest. We additionally derive country code from the CF-IPCountry header set by Cloudflare for fraud-prevention metrics. We do not collect IP addresses, names, payment data, or device identifiers.

Purpose. (a) Notify you when Serendipilink opens early access. (b) Enforce per-email signup uniqueness. (c) Aggregate-level metrics (per phase: founder/beta/public).

Legal basis. Your explicit consent (Art. 6.1.a GDPR), given by submitting the form. You can withdraw consent at any time by emailing privacy@serendipilink.com.

Recipients. Cloudflare, Inc. (hosting + edge + database — US, SCCs). Resend (email delivery — US, SCCs). No data is shared with advertising networks, analytics tools or any third party beyond these processors.

Retention. Your data is retained until you request deletion, until you unsubscribe from the launch announcement, or for a maximum of 24 months after the public launch — whichever comes first. After that, the record is deleted from our database.

Your rights. Access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to lodge a complaint with the Spanish DPA (AEPD, aepd.es) or your local DPA.

How to exercise rights. Email privacy@serendipilink.com from the address you signed up with. We respond within 30 days.

03

Cookies & Local Storage

Serendipilink does not use tracking cookies, advertising cookies, analytics cookies, or third-party cookies. There is no consent banner because no consent-requiring storage is in use.

The site uses your browser's localStorage exclusively for two strictly-necessary preferences: (a) selected theme (light / dark) and (b) selected language. Per AEPD guidance these qualify as technical / functional and are exempt from prior consent.

You can clear these values at any time via your browser's site-data settings. Doing so will reset the site to defaults but will not affect any waitlist entry you submitted.

04

Governing Law

This notice is governed by Spanish law. Any dispute will be submitted to the courts of the city corresponding to the service provider's domicile (to be specified upon commercial launch). For consumers, this provision does not affect rights granted by mandatory consumer law in your jurisdiction.

Last updated: 2026-04-25

Serendipi·link By Sideralith

©2026 · Made on La Palma (Canary Islands)

Roadmap Legal
// SYSTEM_LOG SERENDIPILINK v0.0.0
LIVE
06 / 18
Features shipped
02 / 03
Phases
06
Upcoming features
// PRE-DEV LOG
2026-04-10 14:30 [SYSTEM] Serendipilink.com live. System log active.
2026-04-03 09:01 [SYSTEM] Development of waitlist begins in order to support the early adoption of Serendipilink.
2026-04-03 09:00 [MILESTONE] PRE-PRODUCTION COMPLETE. Requirements · Architecture · ERD · Tasks · Budget — all gates cleared.
2026-04-03 08:30 [DECISION] ADR-003 accepted. Database engine changed: MariaDB 10.11 → PostgreSQL 16. Partial unique index on stages (project_id) WHERE status = 'active' — domain invariant now enforced at DB level.
2026-03-28 11:00 [AUDIT] All 3 errors resolved. Corrected documents re-submitted to OpenProject. Audit gate cleared.
2026-03-26 15:10 [WARNING] ERR #3 — DB-01: stripe_customer_id conflicts with Cashier convention stripe_id. Corrected.
2026-03-26 14:35 [WARNING] ERR #2 — SK-TEST-02: X-Requested-With assertion contradicts ADR-002. Removed from test suite.
2026-03-26 14:20 [WARNING] ERR #1 — DB-08: version column on assets violates append-only (RF-D02). Flagged for removal.
2026-03-26 09:00 [AUDIT] Pre-development audit initiated. Cross-validating requirements · ERD · relational model · tasks.
2026-03-20 10:45 [MILESTONE] Task breakdown complete. 3 blocks · 18 macro modules. Exported to OpenProject.
2026-03-15 15:30 [MILESTONE] REQUIREMENTS.md → v1.2. Agency ≠ User decoupling formalized. Seat limits via Stripe product metadata.
2026-03-09 11:00 [DECISION] ADR-002 accepted. Cloudflare Tunnel hosting. Sanctum cookies dropped → Bearer token auth.
2026-03-04 09:20 [DECISION] ADR-001 accepted. Domain split: serendipilink.com · serendipi.link. Token: SHA-256 hex 64-char.
2026-02-28 16:45 [MILESTONE] ERD v1.0 finalized. 12 tables · 5 logical groups. Append-only enforced on assets & messages.
2026-02-24 10:00 [DECISION] Stack locked. Laravel 13 · SvelteKit 5 · MariaDB 10.11 · Redis · Cloudflare R2.
2026-02-18 14:15 [MILESTONE] REQUIREMENTS.md v1.0 drafted. 27 requirements across 4 domains: Onboarding · Agency · Client · System.
2026-02-10 11:30 [MILESTONE] Persona analysis complete. Two actors: Agency (subscriber) · Client (guest, zero-auth).
2026-02-01 09:00 [BOOT] Serendipilink project initialized. Sideralith begins pre-production.
◈ VIEW_ROADMAP →
$ sideralith@serendipilink:~$ ESC to close