Privacy
Last updated 21 July 2026
Amber is a product about not being surveilled, so this page is short and specific rather than long and lawyerly. It covers this website. The app is stricter still, and gets its own section at the bottom.
What this site collects on its own
Nothing. There is no analytics, no tag manager, no cookie, no session, no fingerprinting, and no third-party script of any kind. Loading this page makes no request to any server other than amber.ink. You can verify that in your browser’s network tab, which is a nicer form of proof than a paragraph like this one.
What we store if you join the waitlist
Your email address, the time you signed up, and your IP address. Nothing else — there isn’t even a name field.
Why the IP address
Only to stop one machine submitting the form thousands of times. It is used for a one-hour rate-limit window and erased within a day. It is never used to work out who or where you are.
Confirming your address
We use double opt-in: signing up records your address as unconfirmed and sends you one email with a link. If you don’t click it within 48 hours, the record is deleted. Nobody can add you to this list except you.
Who else sees your address
Two parties, both because they have to be involved to get mail to you: Resend, which delivers the email, and DigitalOcean, which hosts the server the database sits on. Your address is never sold, rented, shared or used for anything but telling you Amber is ready.
Getting off the list
Every email we send has a one-click unsubscribe link, which removes you immediately and without asking why. You can also write to hello@amber.ink and we’ll do it by hand. Once you’ve unsubscribed, signing up again through the form won’t put you back on — that’s deliberate, so nobody else can re-add you. Email us and we’ll restore you.
When the list is deleted
The waitlist exists to send one announcement. Once Amber has shipped and that email has gone out, the list has done its job and gets deleted.
The app itself
Amber the app is bound by a stricter rule than this website: it makes no network calls except fetching the pages you ask it to save. No analytics, no telemetry, no accounts, no phone-home. Your library never leaves your device unless you set up syncing to a cloud folder you control. This site’s waitlist and the app share nothing.
Questions, or changing this page
Write to hello@amber.ink. If this policy changes in a way that affects anyone already on the list, we’ll say so in the email we send rather than quietly editing this page.