Who we are
AgingSoWhat is a service of Sugarlump. The controller is Zoltán Sipos, eenmanszaak (sole trader), trading as Sugarlump and Sugarlump Innovations, Schietspoel 38, 1251 XV Laren, the Netherlands. KvK 93076134, BTW-id NL004998160B92. Contact: info@sugarlump.nl. AgingSoWhat is not a separate company or registered trade name.
What we process on this site today
This site is a coming-soon page. There is no account, form, newsletter, or payment.
- Cloudflare — when the site is deployed, our host may keep IP address, browser, and request logs for security and delivery.
- Email — if you write to us, we keep what you send so we can reply.
We do not run analytics, ads, or accounts on this page. Fonts are served from this site. We do not call Google Fonts.
Why / legal basis
Hosting logs: legitimate interest in a working, secure site. Email you send us: steps toward a possible contract, or legitimate interest in answering you.
How long
Host logs: as long as Cloudflare keeps them for security. Emails: up to 24 months, unless we must keep them longer for tax or a dispute.
Sharing
Cloudflare hosts this site, and separately hosts the test sign-in app described below. For that test sign-in app, Google Cloud also runs the server and stores the account records, in the Netherlands, and both Google and Apple have now handled a sign-in there for us — one each, for the founder's own test accounts. We do not sell your data. The records themselves sit in the Netherlands. But Cloudflare, Google and Apple are American companies, so some of the handling around them may happen outside the EEA. Two things about that are still open, and we would rather say so than guess: we have not yet established which safeguard covers that handling, and we are still checking exactly which of Google's companies we deal with. We will put both answers on this page before we invite anyone.
Your rights
You may ask for access, correction, erasure, restriction, portability, or object. Email info@sugarlump.nl. You can complain to the Autoriteit Persoonsgegevens (Netherlands) or NAIH (Hungary).
The test sign-in at staging.agingsowhat.com
We are testing an account sign-in at a separate address, staging.agingsowhat.com. It is a test system, not open to the public: we do not link to it from this site or advertise it anywhere, and it is only for people we invite. If you are reading this on agingsowhat.com, there is nothing here for you to sign in to — this website has no sign-in link and sets no cookie of its own.
Here is exactly what the test sign-in does, so you know it in advance:
- You can sign in with your Google account, or with your Apple account. Google Cloud Identity Platform — a Google service — checks that a sign-in is really you, whichever of the two you use, so Google is a processor for sign-in. Apple sign-in is offered too, so Apple is also a processor for sign-in.
- Google sign-in is running code, not a plan, and the founder has now used it himself at staging.agingsowhat.com, testing his own account. Nobody else has signed in there — this test system is not open to anyone but the founder.
- The founder has also now signed in with Apple, once, at staging.agingsowhat.com — the only Apple sign-in that has ever happened for this product, by him or anyone else.
- If you sign in with Apple and choose to hide your email address (Apple calls this "Hide My Email"), what we store is not your real address — it is a private address Apple creates that forwards mail to you. That is what happened for the founder's own Apple sign-in: the record on our side holds Apple's forwarding address, not his real one. We never see your real address if you choose to hide it.
- There is no password with either provider. Google or Apple proves who you are, so we never see or store a password.
- When you sign in, the service sets a cookie on your device that keeps you signed in for 7 days — the same one, for the same 7 days, whichever provider you use. While you are signing in it also sets a short-lived cookie that lasts 10 minutes — a different one for Google than for Apple, so it sets up to three in total, never more. They only say who you are signed in as — they are not used to track you and not used to advertise to you. See the cookies page.
- Your account record holds: a user id, your email address (or Apple's forwarding address, if you hid it), the dates it was created and last changed, whether the account may use the product, and which parts of the product it can reach. We set those last two — you do not type them in. Signing in puts the account on a waiting list. We open the product in batches, not all at once, so a waiting account may later be allowed to use it. We do not send email when someone is waiting — there is no email processor. Still no password, and no record of what you say to us. For the test sign-in, that record is stored with Google Cloud, in the Netherlands (Google calls this data centre region europe-west4) — not on the founder's laptop. Two such records exist there now, both the founder's own: one from his Google sign-in, one from his Apple sign-in.
We have not yet set a retention period for account records — that is still open and will be published here before this test system is offered more widely.
The founder has signed in a few times, always testing his own account: once with Google on his own computer, and once each with Google and with Apple at staging.agingsowhat.com. Nobody else has ever signed in, anywhere, with either provider — no tester has been invited.
The test sign-in now runs on a real server — Google Cloud, in the Netherlands — reachable at staging.agingsowhat.com. We keep that address off this site and do not advertise it, so it is not open to the public even though the server itself is real.
When sign-in opens more widely, we will update this page in the same change. We will not add hidden trackers.