How your data is handled.

This notice covers museumheist.app and the Museum Heist waitlist. Last updated 16 October 2026.

Who is responsible

Tina Morgan, Berlin, Germany. Email: tina@tina-morgan.com.

The Museum Heist waitlist

What I collect. The email address you enter, and the date and time you entered it.

What I use it for. To email you once to say Museum Heist has opened. I don’t use it for anything else and I don’t share it.

Legal basis. Your consent, which you give by submitting the form (Article 6(1)(a) GDPR). You can withdraw it at any time by emailing me. Withdrawing doesn’t affect anything done before.

How long I keep it. One year after you sign up, then it’s deleted automatically. I delete it sooner if you ask.

Who handles it. Cloudflare, Inc. stores the list on my behalf, in a database set up in Europe. Cloudflare is based in the United States and relies on the EU–US Data Privacy Framework and standard contractual clauses for that transfer.

Visiting this site

This site doesn’t use cookies, analytics or advertising trackers.

Hosting. The site is delivered by Cloudflare, which processes your IP address and basic request details to deliver pages and keep the site secure. The legal basis is my legitimate interest in running a secure website (Article 6(1)(f) GDPR).

Fonts. The fonts are hosted on this site, so loading them doesn’t send your data to anyone else.

Your rights

You can ask me for a copy of your data, to correct it, to delete it, or to restrict or object to how it’s used. You can also ask for it in a portable format. Email me and I’ll reply promptly.

You can complain to a data protection authority. For Berlin that’s the Berliner Beauftragte für Datenschutz und Informationsfreiheit (datenschutz-berlin.de).