Privacy Policy

Welcome to Lab24! You're here because you care about your privacy, and so do we. This policy is our way of being upfront and transparent about how we handle any information when you visit our website, www.labtwofour.com, or any other sites we run like www.astell.work.

We believe in keeping things simple, secure, and respectful of your choices.

The Short & Sweet Version (Our Core Philosophy)

• We don't sell your data. Period.
• We keep it in-house. We focus on using minimal data to make our site better for you, not to track you across the internet.
• Your control matters. We give you clear choices about cookies.

What Information We Collect (And Why)

Currently, our website is mainly a homepage and blog. This means we collect very little personal information directly. Most of what we gather is anonymous data to understand how our website is performing and how we can make it more useful.

1. Information from Your Visit (Website Analytics)

To understand how people use our site and improve it, we use an in-house analytics tool called PostHog. We've set it up to be as privacy-friendly as possible.

• What it collects: When you visit, PostHog helps us understand things like which pages are popular, how long people stay, if there are any errors, and how you interact with features (like A/B tests or new features we roll out). This data is primarily anonymous and aggregated.
• Why we collect it: This helps us fix bugs, decide what content to create next, and roll out new features more effectively.
• How it works (Cookies & Local Storage):
  • By default, PostHog runs cookieless. This means it tries to collect anonymous usage data without setting any cookies on your device. However, even in cookieless mode, PostHog may store small, anonymous pieces of information in your browser's localStorage to help track your journey on our site during a single visit or to remember things like your cookie preferences or which version of a feature you see in an A/B test. This data is designed to be temporary and anonymous.
  • If you accept cookies, PostHog will then use a single, first-party cookie. This cookie is set by labtwofour.com (not a third party) and helps us identify you as a unique visitor for a longer period, allowing for more accurate analytics and a more consistent experience across your visits.
• Where it's stored: Data collected by PostHog is processed and stored on PostHog's servers in the US. PostHog acts as our data processor; they handle the data strictly according to our instructions and do not share it with other third parties for their own purposes.

In the future, we plan to add features like user logins and purchasing. When these features are live, we will update this policy to explain exactly what personal data we collect (like your name, email, shipping address) and how we use it.

• Payments: If you make a purchase, payment processing will be handled securely by Polar, a trusted third-party payment processor. We will not directly store your sensitive payment information (like credit card numbers) on our servers; Polar will handle that securely.

Your Choices & How We Handle Cookies

We believe you should have control over your data.

• Our Cookie Banner: When you first visit our site (or after 7 days if you previously dismissed it), you'll see a small banner asking about cookies.
  • Default Privacy: If you do nothing, after 10 seconds, the banner will automatically dismiss, and cookies will be declined. This means PostHog will run in its cookieless, anonymous mode.
  • Accepting Cookies: You have the option to explicitly click an "Accept" button on the banner. If you do this, our single PostHog cookie will be set to help us provide you with the best possible experience and more accurate insights into how our site is used.
• Changing Your Mind: You can always change your cookie preferences. Look for a link on our Privacy Policy page (this one!) or simply wait 7 days for the banner to reappear. (It will reappear if it is auto dismissed)

Third-Party Content (Stuff We Don't Control)

We want to give you great content, and sometimes that means embedding things from other services.

• YouTube Videos: We embed videos from YouTube onto our blog (e.g., tutorials, product demos). We use YouTube's "privacy-enhanced mode" (youtube-nocookie.com) to help limit their data collection. However, when you play an embedded YouTube video, YouTube (which is owned by Google) may set its own cookies or use other tracking technologies. We have no control over these third-party trackers or how YouTube uses any data they collect. We encourage you to review YouTube's (Google's) privacy policy if you have concerns.
• Cloudflare: We use Cloudflare to host our website and ensure it's secure and fast for you. Cloudflare provides basic, aggregated web analytics as part of their service (e.g., showing us overall traffic patterns, not individual user data). Cloudflare acts as our service provider and helps us deliver our website to you reliably. In summary: While we don't directly share your personal data with third parties for marketing or advertising, we do use trusted service providers like PostHog and Cloudflare who process data on our behalf to operate and improve our website. They are contractually obligated to protect your data and only use it for the purposes we define.

How We Keep Your Data Safe

We take the security of your information seriously. We use industry-standard measures (like secure connections via Cloudflare, and relying on our service providers' robust security practices) to protect your data from unauthorized access, use, or disclosure. Our primary servers are located in the US-EAST region, secured by our hosting provider.

Children's Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can take appropriate action.

Your Privacy Rights

You have rights regarding your personal data. We are committed to helping you exercise these rights in an easy, straightforward way:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Correction: If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it.
• Right to Erasure (Right to be Forgotten): You can ask us to delete your personal data in certain circumstances, for example, if the data is no longer necessary for the purposes for which it was collected.
• Right to Object to Processing: You can object to us processing your personal data for certain purposes.
• Right to Restriction of Processing: You can ask us to limit how we use your personal data in specific situations.

To exercise any of these rights, please contact us at legal@labtwofour.com or visit labtwofour.com/contact. We will respond to your request as quickly as possible and within any legally required timeframes.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy.
• Post a prominent notice on our website's homepage for a reasonable period (e.g., 7 days) to let you know about the changes. We encourage you to review this policy periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please don't hesitate to reach out: