Privacy
This page is awaiting legal review. It is published because GM10 is collecting email addresses today and the people giving them are owed a plain account of what happens to them. Everything below describes what the system actually does, verified against the code. It is not a lawyer's document and does not yet state a governing jurisdiction or a formal legal basis. Those are being added.
Last updated 9 August 2026.
The short version
GM10 has not launched. Two forms on this site collect contact details so we can get in touch — one to tell you when we open, one for shop owners asking to appear on the podcast. We do not pass that information to anyone else for money, we do not share it for advertising, and you can ask us to delete it.
What the pre-registration form stores
When you enter an email address and submit it, we store up to seven things:
- Your email address, as you typed it.
- Your first name — only if you choose to give it. The field is optional and the form works without it. We use it to address the launch email to you by name. Leave it blank and nothing is stored.
- A normalised copy of it — lowercased and trimmed — used only to stop the same address being added twice.
- The date and time you submitted it.
-
Which page or campaign the submission came from, as a
short tag such as
web-public. - A one-way scrambled form of your IP address. See below.
- Your browser's user agent string.
What the podcast form stores
This is a separate form, a separate store, and a separate reason for holding it. A shop owner asking to appear on a podcast has not asked for launch email, and we do not treat them as if they had. It stores everything above, plus what you fill in:
- Your shop name.
- A contact name, if you give one.
- A phone number, if you give one.
- A location — city and state — so we can plan travel.
- Your story, and your preferred times. These are free text boxes; whatever you write in them is what we hold.
Your IP address is scrambled before it is stored
We never store your IP address. We combine it with a secret value and store the resulting one-way hash, which we use to spot the same source submitting the form repeatedly — the form accepts twelve submissions an hour from one source and then stops. The original address is not written down anywhere and cannot be read back out of the stored value.
We are being careful not to overstate this: a scrambled identifier is still information about you, and we treat it that way.
Who else can see it
The forms and the database run on Cloudflare, who process this data on our behalf as our hosting provider. This site also uses Cloudflare Turnstile to tell people from bots, which involves your browser talking to Cloudflare when you submit a form.
Beyond that, nobody. Your details are not for sale, not for rent, and are never handed to advertisers or data brokers.
How long we keep it
Until you ask us to remove it, or until we no longer need it. We want to be exact rather than reassuring here: there is currently no automatic expiry. A record stays until somebody deletes it deliberately. A defined retention period is one of the things being settled in the review this page is waiting on.
Getting your information removed
Email billman@thegm10.com from the address you signed up with, or naming it, and ask. We will delete the record and confirm when it is done.
You can also ask what we hold about you, or ask us to correct it. There is no self-service page for this yet — a person reads the request and carries it out.
Children
GM10 is not aimed at children and we do not knowingly collect information from anyone under 13. If you believe a child has submitted their details, email the address above and we will remove them.
Changes to this page
When it changes, the date at the top changes with it. The next substantial revision will be the one that follows legal review.