What We Lived

Privacy,
in plain words.

The product isn't open yet. Today this site does one thing: it takes an email address so we can tell you when it is. Here is exactly what happens to that address, and what you can make us do with it.

Last updated 31 August 2026
Who is responsible

What We Lived is run by Oscar Andersson, a sole trader based in Hägersten, Stockholm, Sweden. There is no company behind it yet — just a person. That person is the data controller for everything described on this page, under the EU General Data Protection Regulation (GDPR).

Write to hello@whatwelived.com about anything on this page. Questions, corrections, or a request to delete what we hold — it all goes to the same address, and it reaches me directly.

What we collect

One form, one purpose. If you type your email into the waitlist box, we store it so we can send you one message when the product opens.

The signup record holds two things:

Nothing else is kept, and that is a deliberate choice rather than an oversight. Your browser offers up more than this with every request — where you came from, roughly where you are — and we throw it away. A waitlist doesn't need it.

No account, no profile, no purchase history, and nothing bought from anyone else.

What we don't do

Why we're allowed to

Lawful basis: your consent

We rely on consent — Article 6(1)(a) GDPR. You gave it by choosing to type your address into the waitlist form and submitting it. Nothing on this site collects your data unless you do that.

You can take that consent back at any moment, for any reason or none, by emailing hello@whatwelived.com. Withdrawing it is as easy as giving it, and it costs you nothing. It doesn't make anything we did beforehand unlawful, but it stops everything from that point on.

How long we keep it

Until we send you the launch email, or until you withdraw consent — whichever comes first. Then the record is deleted. We don't keep a list of people who used to be interested.

Where it lives

The site and the waitlist run on Cloudflare. Your email address is stored in Cloudflare Workers KV, and Cloudflare also serves every page you're reading. Cloudflare is our processor: it handles the data on our instructions and under a data processing agreement, and it doesn't get to use it for its own purposes.

As part of running the network, Cloudflare processes technical request data — including IP addresses — for delivery and security. That's Cloudflare's own logging, not something we store or look at.

Transfers outside the EU

Cloudflare's network is global, so your data may be stored or processed on servers outside the EU and the EEA, including in the United States. The safeguard we rely on for those transfers is the Standard Contractual Clauses approved by the European Commission, which form part of Cloudflare's data processing agreement.

No third parties

Your browser doesn't talk to anyone but us. There are no analytics, no tag managers, no advertising pixels, no embedded widgets, and no cookies. The two typefaces are served from this domain rather than from Google's font servers, so loading a page here doesn't hand your IP address to a company you never chose to visit.

Your rights

The data is yours. Under the GDPR you can exercise any of these, free of charge, by emailing hello@whatwelived.com. We'll answer within one month.

If we get it wrong

Tell us first if you can — it's usually the fastest fix. But you have the right to complain to a supervisory authority regardless. In Sweden that is Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection: imy.se, imy@imy.se, Box 8114, 104 20 Stockholm. If you live in another EU or EEA country, you can go to your own national authority instead.

Not yet — but coming

None of this is happening today. It's here so you can see where the product is going before you decide to join the list.

When What We Lived opens, it will handle the material families actually record: audio recordings of conversations, the transcripts made from them, and photographs. That is far more sensitive than an email address, and it will be governed by a fuller privacy policy published before anyone can upload a single file.

The processors we expect to use for that work:

Recordings will never be used to train AI models — not ours, and not anyone else's. Each of these processors will be under a data processing agreement that forbids it before a single family recording is sent to them. Nothing above is active yet, and joining the waitlist gives no one your voice, your photographs, or your family's stories.

Changes

This page will change as the product grows — the launch version will describe recordings, transcripts and photographs in full. When something material changes, we'll update the date at the top, and if it affects the address you've already given us, we'll tell you by email rather than quietly editing the page.

Questions about any of it: hello@whatwelived.com.