Founding 100 data
Email address, optional preferred username, interest category, optional project note, annual-offer interest, consent status, and verification/creation timestamps.
PRE-LAUNCH PRIVACY NOTICE · STAGE 0.07F-D
Waitlist, account, and financing-inquiry privacy
This notice explains the limited information CAGInc collects for the Founding 100 waitlist, customer accounts and security, and confidential-financing proposal requests. No payment information is collected by the Portal at this stage.
Account data
Email address, username, permanent customer/account ID, account creation and email-confirmation state, security/lockout data, account roles, whether a verified Founding 100 entry is linked to the account, and a limited security-event audit trail for sign-in, password, lockout, session-revocation, and important Boss actions.
Financing inquiry data
Full name, optional company/organization, business email address, inquiry type, the message supplied with the request, consent status, submission time, and the internal review state needed to manage access to the confidential financing proposal, plus secure-delivery issue/expiry/revocation timestamps and access/download counters for approved requests.
Passwords
CAGInc does not store account passwords as readable text. ASP.NET Core Identity stores a one-way password hash and related security metadata used for authentication and recovery.
Why we collect it
To operate the waitlist, provide customer sign-in and account recovery, verify genuine email ownership, connect a customer account to a matching verified waitlist entry, manage requests for the confidential financing proposal, send approved contacts private time-limited proposal links, record access/download activity for those links, contact qualified business contacts about those requests, enforce Customer/Founding100/Staff/Boss access boundaries, measure demand, and protect the service from abuse.
Storage and access
Waitlist records are stored in the waitlist database on configured persistent production storage. Customer accounts, security events, financing-proposal requests, and secure-delivery records are stored in the persistent account/security database in separate tables. Secure proposal access tokens are stored only as one-way SHA-256 hashes; the raw private link token is not retained in the database. Account authentication uses persistent data-protection keys so secure cookies and account tokens survive normal deployments. Persisted data-protection keys are encrypted with a dedicated certificate on persistent service storage. Boss routes are protected by the verified CAGInc account role system.
Security-event audit
The Portal records a compact operational history of sign-in outcomes, lockouts, password changes/resets, session revocation, account verification, protected Boss exports, receipt of financing-proposal requests, Boss proposal decisions, secure-link issue/revocation events, and successful proposal access/download events. Passwords, reset tokens, API keys, and SMTP secrets are not written to this log.
Email verification and recovery
The Portal uses its configured email provider for Founding 100 verification, account email confirmation, password-reset links, and approved confidential-proposal access links. Local development uses development outboxes instead of sending real email.
What Stage 0.07F-D does not collect
No card number, banking information, CAB$ purchase, paid membership, direct game purchase, customer project file, or Launcher-device record is collected by this stage. Submitting a financing inquiry also does not automatically release the confidential proposal.
Removal or questions
To ask about pre-launch data or request removal, contact cheapassgamesinc@gmail.com. Account deletion/self-service data controls will be expanded before paid customer services are enabled.
No sale of pre-launch data
CAGInc does not operate the Founding 100 waitlist, customer-account foundation, or financing-inquiry workflow as a data-broker product. The information is collected to operate and evaluate CAGInc services and respond to legitimate business inquiries.