CBAM Pulse

Privacy notice

Last updated: 2026-07-16

CBAM Pulse (cbampulse.com) provides free CBAM tools and a private early-access workspace. This interim notice currently describes the waitlist, public tools, and analytics only. Its authenticated account and workspace-data sections must be completed before external pilot invitations begin.

Who is responsible

The data controller is the operator of CBAM Pulse (cbampulse.com). Privacy requests are monitored at privacy@cbampulse.com; the broader contact page lists the other role addresses. External pilot invitations remain paused until authenticated-data disclosures are approved and deletion-readiness is proved through the separate rehearsal gate.

The waitlist (email signup)

If you subscribe to the waitlist on a tool page, we store: your email address, the page you signed up from, the version of the consent text you agreed to, and timestamps. Nothing else — no name, no company, no IP address.

  • Purpose: emailing you about new CBAM Pulse tools and product updates — nothing else. We do not sell or share your email with third parties.
  • Legal basis: your consent (Art. 6(1)(a) GDPR), given via a checkbox that is never pre-ticked. Signing up creates no account and is never required to use any tool on this site.
  • Retention: until you withdraw consent or ask for deletion. No email is sent to you after you unsubscribe or withdraw.
  • Withdrawal: no waitlist emails are currently sent. To withdraw consent or ask for deletion, email privacy@cbampulse.com from the subscribed address and state the scope of your request.

Tools and calculators

The free tools (such as the 50-tonne threshold checker) run in your browser and do not send your entered figures to us or store them anywhere. Analytics events record only coarse, anonymous outcomes (for example “a check was completed”), never the values you typed.

Analytics

We use Google Analytics 4 to understand aggregate site usage (pages viewed, tools completed). We configure our events to contain no personal data and no user-entered values. Google Analytics sets cookies and processes technical data (such as truncated IP and device information) under Google's terms; see Google's privacy documentation for details.

Where data is processed

The site is hosted on Vercel; waitlist data is stored with Supabase in the EU (Frankfurt region). Both act as processors for us. We do not transfer waitlist data outside these providers.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, restrict or object to processing, request portability, and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). You can also complain to your national data-protection authority. Send requests to privacy@cbampulse.com. External pilots remain blocked until the remaining disclosures are approved and the deletion procedure is active.