Privacy — Bane's Lab

A1Site Operator

A1.1Contact

Name: Bane's Lab
Operator: Jay Baleine
Contact Email: jay@banes-lab.com
Website: https://banes-lab.com

B1What I Do Not Collect

B1.1No User Data

The site has no account system, login, profile, payment processing, or chat or assistant features, so none of the following is collected, stored, or processed:

Names, usernames, or any chosen identifier
Email addresses
Passwords or credentials of any kind
Payment or billing information
Profile preferences, avatars, or personalization settings
Chat history, conversations, or message content
Behavioral analytics, page-view tracking, or session recordings
Third-party advertising or marketing identifiers

Because no user data store exists, there is nothing for me or an attacker to leak or misuse.

B1.2No Cookies

The site does not set application cookies during normal browsing. Your browser may exchange standard transport-level connection state with the server (TLS session resumption). The server keeps that state in its session cache for up to ten minutes, and it does not identify you.

B1.3No Tracking Scripts

No page loads analytics tags, ad networks, social-media trackers, or third-party telemetry libraries.

C1What the Server Sees During a Visit

C1.1Transport-Level Information

When your browser requests a page, standard HTTP/TLS metadata is processed by the server to deliver the response:

IP Address: Used to route the response and to enforce basic abuse protection at the reverse-proxy layer; the access log keeps it shortened to its network, never whole
User-Agent String: Used to deliver compatible content
Request Path and Method: Used to serve the correct file
Referer Header: If sent by your browser, recorded in the access log with the request

This information is processed transiently and is not joined to any persistent user profile. Server access logs are retained only as long as needed for operational troubleshooting and security review. The error log records the full address only when a request triggers a server error, and it is kept for troubleshooting.

D1Third-Party Services

D1.1What Loads From Outside My Server

Let's Encrypt: Issues TLS certificates used to secure HTTPS. They do not see traffic to the site.

Every asset a page needs, including scripts, styles, fonts and images, is served from this origin, so your browser contacts no other server during a visit.

E1Your Rights

E1.1Data Subject Rights

Most data-subject rights under GDPR, UK GDPR, CCPA, and similar regulations apply to entities that hold personal data about you. Since I hold no personal data about you, there is generally nothing to access, correct, export, or delete.

E1.2If You Have Questions

If you believe I hold or have processed personal data about you, contact me at jay@banes-lab.com and I will tell you what, if anything, exists.

F1Security

F1.1Protections in Place

All content is delivered over HTTPS with modern TLS, strict security headers, and a hardened reverse proxy. Technical details are documented on the Info page.

Security information

G1Changes to This Policy

G1.1Updates

This policy is updated when site behavior changes. The version and update date at the top of this page identify the current policy.

H1Contact

H1.1Privacy Questions

Email: jay@banes-lab.com
Note: Responses are best-effort and not guaranteed within a fixed window.