Privacy page published; controller named.
The site now has a privacy page. It says what the waitlist keeps, where it goes, what measurement runs and what waits for your say-so, and names the data controller.
An eighteen-year promise is made of small decisions, most of which nobody would ever see. So we publish them: what changed, why, and what it cost us. Reversals included.
The site now has a privacy page. It says what the waitlist keeps, where it goes, what measurement runs and what waits for your say-so, and names the data controller.
In July we wrote that we would stay out of the UK rather than serve it badly. We have found the way to serve it well: UK promotions approved by an FCA-authorised firm before publication, on the UK’s own pages, with the prescribed risk warning and a cooling-off period on first investment.
The July entry stands below, as reversals do here. What changed is not our reading of the rules but our willingness to do the slow version of them.
We removed allocation presets and the age-based glide path. A capsule holds Bitcoin, or euros, or dollars — for its whole life, with no way for anyone to switch it later.
The cost is real: families who want a mix now open two capsules instead of one. We took it because a capsule whose contents can change is a promise whose terms can change, and eighteen years is long enough for that to matter more than convenience.
Capsule transactions no longer depend on a third-party service staying online or staying in business. Fewer companies between your family and the capsule, and one less renewal that could quietly break something in year nine.
An external security review of the capsule contract is scheduled against a frozen specification. We publish the report when it lands, including whatever it finds. Until then, treat the contract as unaudited — because it is.
We planned to launch with a euro capsule and reversed it. A Bitcoin capsule needs no partner to pay interest, which means it can carry the entire promise on day one: one-way deposits, family-held keys, recovery without us.
The accepted cost: we now sit inside crypto-promotion rules from the first day of marketing, in every country we enter.
We keep one unit in five of the interest earned, and never touch deposits. Stated now, before those capsules exist, so it cannot be quietly revised into something else at launch.
UK rules for promoting products like ours require an approval regime and a mandatory cooling-off period. A cooling-off period applied to a grandmother tapping a gift link on a birthday morning does not end in a gift.
So we are absent from the UK rather than half-present. We would rather revisit it later than serve it badly now.
The beneficiary is set the day the capsule is sealed, not at unlock. It removes the worst failure mode in this category — money that arrives at eighteen with no way to prove who it belongs to.
Entries are written when a decision lands, not when it ships. Where a decision was reversed, the reversal keeps its own date rather than quietly editing the original.
Setting one up takes ten minutes. We open capsules in small groups so every founding family gets a real conversation.
For parents and guardians (18+). One email to confirm, one when your capsule is ready — nothing else.
iPhone and Android apps arrive with the first capsules. Everything works in a browser on day one.