# Privacy — LFM Labs

Last updated: 2026-07-27
Applies to: lfmlabs.com

> Short version: no analytics, no tracking, no advertising cookies, no accounts.
> We don't know who you are and haven't tried to find out. The one place your
> data leaves this site is HAL — part of him runs on third-party AI
> infrastructure, so what you type is transmitted there to generate his reply.
> We pay for the tier where that input is NOT used to train models, and we keep
> no copy.

## Who we are

LFM Labs, a polymathic laboratory. Contact: hello@lfmlabs.com

## What we do not collect

- No analytics of any kind. No Google Analytics, Plausible, Fathom, PostHog,
  Segment, Hotjar, or equivalent.
- No advertising or tracking cookies, and no third-party trackers.
- No accounts, sign-ups, newsletters, or contact forms.
- No fingerprinting, session recording, or heatmaps.
- We do not sell, rent, or share data with anyone, because we don't hold any.

## HAL — the one place data leaves this site

HAL is the conversational surface on the homepage. The lab orchestrates him, but
the language generation runs on a **third-party AI infrastructure provider**. So
when you send him a message:

- Your message is transmitted to that provider, which generates the reply. They
  act as a processor for this purpose and for nothing else.
- We pay for a **commercial tier**. On it, submitted content is not used to
  train or improve any model, and provider staff do not review it. (Free tiers
  of such services typically do both — which is precisely why we pay.)
- The provider may retain the request briefly for abuse-prevention and
  operational purposes under its own terms.
- **We store nothing.** Conversations are not written to any database or log we
  keep. Closing the page discards it. There is no history to request or delete,
  because there is none.

If you need to know exactly which provider processes your message — as you're
entitled to — write to hello@lfmlabs.com and we'll tell you.

**Please don't type anything sensitive to HAL** — personal data about yourself
or others, credentials, health or financial information, or anything
confidential. He's a front-of-house conversation, not a secure channel. Use
email for anything that matters.

## Hosting and server logs

The site runs on **Cloudflare Workers**. Cloudflare processes requests and, as
any host does, records standard technical request data — IP address, user agent,
timestamp, and the URL requested — for delivery, security, and abuse prevention.
This is Cloudflare's processing under its own terms, retained on its schedule.
We do not build profiles from it and do not combine it with anything else.

Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

## Storage on your device

The site sets no cookies for tracking or advertising.

A single `localStorage` entry exists for a design-tweaking panel that is only
reachable with a `?dev=1` URL flag. It stores visual parameters — sizes,
speeds, colours — and never anything about you. If you have never used that
flag, nothing is written.

## Email

If you write to `hello@lfmlabs.com` or `z@lfmlabs.com`, that mail is delivered
and stored by **Apple iCloud Mail**, which hosts mail for this domain. We keep
correspondence for as long as it's useful to the conversation, and we don't add
you to any list — there is no list.

Apple's privacy policy: https://www.apple.com/legal/privacy/

## Your rights

Under Malaysia's PDPA, the EU/UK GDPR, and comparable regimes, you have rights
to access, correct, and erase personal data held about you, and to object to its
processing.

In practice we hold almost nothing to act on: no analytics, no profiles, no
conversation history. If you have emailed us, that correspondence is the one
record that exists, and you can ask us to delete it at any time by writing to
hello@lfmlabs.com. We'll confirm when it's done.

## Children

This site is not directed at children and we knowingly collect nothing from
anyone.

## Changes

Material changes will be reflected here with a new date at the top. There is no
mailing list to notify, by design.

## Questions

hello@lfmlabs.com — a person reads it.