Privacy notice

Who is responsible

PapsLab is the controller for personal data sent through this website. It is a one-person practice. Privacy requests go to hello@papslab.com. A postal address is not published on this site.

Why the data is used

A message is used to reply and, if you go ahead, to prepare the job you asked about. That is steps toward a contract, and a legitimate interest in answering a message you chose to send. Edge logs are kept so the site can run and stay secure, which is also a legitimate interest. There is no marketing list and personal data is not sold.

What is collected

The site has no analytics, no advertising pixels, and no on-site estimate tool. Personal data is collected only when you send a message or when standard hosting/security logs are created.

Contact form

When you submit the contact form, PapsLab sends one transactional email to hello@papslab.com via the email provider listed below. That message includes your name, email address, the topic you picked and the message itself. Your address is the reply-to, so the reply can go back to you. Cloudflare, which hosts the site, can log the request, including a client IP address, for security and operations — see Server logs. If the anti-spam check is shown, Cloudflare Turnstile also processes browser and request signals to verify the submission is legitimate.

Server logs

Cloudflare, which serves this site, keeps short-lived edge logs of HTTP requests. By default, stored fields typically include the IP address, user agent, path, and similar metadata, with retention on the order of a few days — check Cloudflare’s current documentation for exact periods and locations.

Free site check

When you run the site check, the domain you enter is looked up through Cloudflare's public DNS resolver and loaded by Google PageSpeed Insights, which measures the homepage on a simulated phone. The results (findings, a screenshot of the homepage, and the time of the check) are stored for 30 days so the report link works, then deleted automatically. No IP address or email is stored with a report. To have a report removed sooner, email hello@papslab.com.

Subprocessors

PapsLab relies on the following for hosting and email. The links point to their data processing and customer DPA information.

What is not collected

• No third-party web analytics and no advertising cookies.
• No social pixels, remarketing beacons, or similar marketing trackers.
• No browser fingerprinting for profiling.
• Fonts and static assets are self-hosted; no fonts or third-party marketing scripts are loaded for normal browsing. The contact form and the site check may load Cloudflare Turnstile only for anti-spam verification.

Your rights (GDPR)

Under the General Data Protection Regulation and Irish data protection law, you may have the right to access, rectify, or erase personal data PapsLab processes about you, to restrict or object to certain processing, and in some cases to receive your data in a portable form. You can lodge a complaint with the Data Protection Commission (DPC) at dataprotection.ie. If you get in touch from outside Ireland, UK GDPR may also apply to how your request is handled; requests are still answered in line with applicable law. For routine requests, email hello@papslab.com.

Retention

Messages sent via the contact form are delivered to hello@papslab.com and may be kept for as long as needed to respond and do the work, unless you ask for them to be removed. Edge logs on Cloudflare are short-lived, as described above. You can request deletion of correspondence by writing to the same address.

Changes to this policy

This notice is updated when the stack or practices change. The last change date is shown at the top of this page.

Contact

Questions about this notice: hello@papslab.com

← Back to home