Privacy policy

This policy explains what personal information we collect when you visit this site, book a call or work with us, what we do with it, and the choices you have. We collect as little as we can, we do not sell it and we do not use it for advertising.

Updated29 October 2026

Who we are

Labs, the studio behind this site (‘we’, ‘us’), decides how the personal information described here is used. You can write to us about it at any time at hello@labs.online.

What we collect

When you book a call: your name, email address and business name, what you would like to make, any notes you add, the day and time you pick, your time zone, and the estimate from the cost calculator if you bring one.

If you become a client: your name and email address for your client account, your password (stored only as a secure hash we cannot read back), and the changes, messages and files you share in your dashboard.

When we email each other: the emails and anything in them.

Visits: we count visits to this site ourselves, without cookies. For each page we record its address, how long it is in view, how far it is scrolled and which parts of it are looked at, the site that sent you there, your type of device, browser, system and screen width, and your browser’s language and time zone (which tells us roughly which country you are in).

To tell one visitor from another within a day, your IP address and browser are combined with a secret that changes every day and is then thrown away; only the result is kept, never the address itself. So we cannot recognise you on another day, and visits are never linked to your name or email. Visits by the studio’s own team are not counted.

Technical information: the servers that run this site record basic information about each request, such as your IP address and browser, to keep the site working and secure, and to stop abuse.

How we use it

To arrange and hold your call (including a video link and a calendar invite), to reply to you, to prepare quotes, to do the work you ask for, to send you updates about your project, to keep proper records, to keep this site and your account secure, and to see which pages and parts of the site are useful so we can improve it.

Our reasons for using it

Data protection law asks us to say why we may use your information. We use it to take the steps you ask for before a project and to carry out our agreement with you; for our legitimate interests in running the studio, replying to enquiries and keeping the site secure; and where the law requires us to keep records. If we ever ask for your consent, you can withdraw it at any time.

Cookies and your browser

This site keeps a few of your choices in your own browser, such as light or dark mode and whether motion is paused, and in your dashboard the last project you opened and any change you are still writing. They stay on your device and are never used to track you.

If you sign in to your dashboard, we set one cookie that keeps you signed in. It is used for nothing else, lasts up to 30 days, and is removed when you sign out.

We do not use advertising or analytics cookies: visits are counted without them (see What we collect). If that ever changes, we will update this page first.

Dictation in your dashboard

If you dictate a change instead of typing it, your browser turns your voice into text using its own speech service (in some browsers this is processed by the browser’s maker, such as Google or Apple). We receive only the text, never the recording.

Who helps us

We use a few trusted services to run the studio, and they handle your information only on our instructions: Railway, which hosts this site and its database; Resend, which sends our emails; and Google, for our email, calendar and the video link for your call. Our emails may also load a typeface from Google Fonts when you open them.

We never sell your information. We share it with anyone else only if the law requires us to.

Where it is stored

Some of these services may store or process information outside the country where you live, including in the United States. Where they do, they protect it with the safeguards data protection law requires, such as standard contractual clauses.

How long we keep it

Bookings: for up to 24 months after our last contact, unless we go on to work together.

Client accounts and project information: for as long as your project and account are active, then for up to 24 months, unless you ask us to delete them sooner.

Records we must keep, such as invoices: for as long as the law requires.

Visit counts: for up to 25 months, then deleted.

Server request records: for a short time only, to keep the site running and secure.

Keeping it safe

Your information travels over encrypted connections, passwords are stored only as secure hashes, and sign-in and booking links are single use and expire. Only the people working on your project can see it.

Your rights

You can ask us for a copy of your information, ask us to correct or delete it, ask us to limit or stop using it, object to how we use it, or ask for it in a form you can take elsewhere. Write to hello@labs.online and we will reply within one month.

If you are unhappy with how we have handled your information, you can complain to the data protection authority where you live or work. We would appreciate the chance to put it right first.

Children

This site and our services are for adults and businesses. We do not knowingly collect information from anyone under 16.

Changes to this policy

If we change this policy, we will update this page and its date, and tell you directly if the change affects information you have already given us.