Afara.

Website privacy

Last updated: October 25, 2026.

This notice covers this website, not the Afara app.

If you use the waitlist form, the address you type is sent to this website and stored for your Afara access request.

We keep waitlist addresses for up to 24 months, then remove them from the live list.

Your request is acknowledged on this page only. We do not send a confirmation email. A daily limit may prevent new requests from being accepted.

The pages have no sign-in fields. Cloudflare hosts this website and runs security checks. These services may add JavaScript and security checks may use cookies. The waitlist uses Cloudflare Turnstile to check submissions. Your browser contacts Cloudflare directly when the check loads.

We may use your address for a later Afara invitation. Any invitation email will include a link to stop further invitations.

To have your address removed, write to privacy@afara.app from the address you want removed.

Requested addresses are removed from the live list within 30 days. After any live list removal, including expiry, addresses may remain in database restore history for up to 30 more days.

We keep a keyed one-way fingerprint of an address removed by unsubscribe or removal request so it is not added again. This fingerprint has no scheduled expiry. We also keep a digest of any issued unsubscribe link together with the address fingerprint, with no scheduled expiry, not the original link token.

Abuse limits use keyed hashes of the submitted email address and connection IP, not raw addresses or IPs as counter keys. Email events count over one day and connection events over one hour. Connection and day counts are kept for about three days. Cleanup is bounded, so physical deletion may take longer than these counting periods.

Recovery records contain an address fingerprint, event type and time, not the email address. Unsubscribe and removal request records have no scheduled expiry. Other expiry records are kept for about five weeks, and physical deletion may take longer.

Requests for these pages may appear in hosting logs.