Your email stays with us.

Bites & Gains is a protein gummy brand in development, based in Lithuania. We are the data controller for this waitlist.

Contact for anything privacy-related: mariusjon000@gmail.com

• Your email address, which you type in.
• Your flavour vote, plus the flavour idea if you picked "Other".
• When you joined (date and time).
• A hashed version of your IP address. This is a scrambled fingerprint, not the address itself. We only use it to stop one source from flooding the list with fake signups.

We don't use cookies, analytics, ad trackers or tracking pixels. Your browser saves your place number on your own device (local storage) so the site can show it again. That stays on your device and you can clear it anytime.

• Launch email: we email you when the first batch is ready. Legal basis: your consent when you join (GDPR Art. 6(1)(a)).
• Flavour research: we count votes and read the ideas to decide what to make first. We only look at them as totals and lists, never to profile you.
• Spam protection: the hashed IP. Legal basis: our legitimate interest in keeping the list real (Art. 6(1)(f)).

We never sell your data or share it for advertising.

Cloudflare, Inc. hosts this website and the database the list is stored in. We picked a European storage location for the database. Cloudflare may still process data outside the EU. When it does, that's covered by the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.

We'll probably use an email service to send the launch email. Before we do, we'll name it here.

We keep your data until you unsubscribe or ask us to delete it. If neither happens, we delete the whole list at the latest 24 months after you joined.

You can ask us to show, correct, delete or export your data, and to stop using it. You can also take back your consent at any time. That doesn't affect anything we did before you withdrew it. Email us and we'll act within one month, usually much faster.

You can also complain to the Lithuanian data protection authority, the State Data Protection Inspectorate (vdai.lrv.lt), or to the authority in your own EU country.

If you're under 14, please ask a parent or guardian before you join.