# Privacy — Bane's Lab

> Privacy Policy for Bane's Lab: the site collects, stores and processes no personal data; this policy describes what a normal visit exchanges with the server.

Canonical: https://banes-lab.com/privacy

# Privacy Policy

Bane's Lab is a static informational website. I do not collect, store, or process personal data. This policy describes the information your browser exchanges with the server during a visit and what happens to it.

Effective: September 19, 2026 Updated: September 24, 2026 v2.1.1

Contents

- [A1 Site Operator](#data-controller)
- [B1 What I Do Not Collect](#what-we-dont-collect)
- [C1 What the Server Sees During a Visit](#what-the-server-sees)
- [D1 Third-Party Services](#third-parties)
- [E1 Your Rights](#your-rights)
- [F1 Security](#security)
- [G1 Changes to This Policy](#changes)
- [H1 Contact](#contact)

## Site Operator

### Contact

**Name**

Bane's Lab

**Operator**

Jay Baleine

**Contact Email**

jay@banes-lab.com

**Website**

https://banes-lab.com

## What I Do Not Collect

### No User Data

The site has no account system, login, profile, payment processing, or chat or assistant features, so none of the following is collected, stored, or processed:

- Names, usernames, or any chosen identifier
- Email addresses
- Passwords or credentials of any kind
- Payment or billing information
- Profile preferences, avatars, or personalization settings
- Chat history, conversations, or message content
- Behavioral analytics, page-view tracking, or session recordings
- Third-party advertising or marketing identifiers

Because no user data store exists, there is nothing for me or an attacker to leak or misuse.

### No Cookies

The site does not set application cookies during normal browsing. Your browser may exchange standard transport-level connection state with the server (TLS session resumption). The server keeps that state in its session cache for up to ten minutes, and it does not identify you.

### No Tracking Scripts

No page loads analytics tags, ad networks, social-media trackers, or third-party telemetry libraries.

## What the Server Sees During a Visit

### Transport-Level Information

When your browser requests a page, standard HTTP/TLS metadata is processed by the server to deliver the response:

**IP Address**

Used to route the response and to enforce basic abuse protection at the reverse-proxy layer; the access log keeps it shortened to its network, never whole

**User-Agent String**

Used to deliver compatible content

**Request Path and Method**

Used to serve the correct file

**Referer Header**

If sent by your browser, recorded in the access log with the request

This information is processed transiently and is not joined to any persistent user profile. Server access logs are retained only as long as needed for operational troubleshooting and security review. The error log records the full address only when a request triggers a server error, and it is kept for troubleshooting.

## Third-Party Services

### What Loads From Outside My Server

**Let's Encrypt**

Issues TLS certificates used to secure HTTPS. They do not see traffic to the site.

Every asset a page needs, including scripts, styles, fonts and images, is served from this origin, so your browser contacts no other server during a visit.

## Your Rights

### Data Subject Rights

Most data-subject rights under GDPR, UK GDPR, CCPA, and similar regulations apply to entities that hold personal data about you. Since I hold no personal data about you, there is generally nothing to access, correct, export, or delete.

### If You Have Questions

If you believe I hold or have processed personal data about you, contact me at jay@banes-lab.com and I will tell you what, if anything, exists.

## Security

### Protections in Place

All content is delivered over HTTPS with modern TLS, strict security headers, and a hardened reverse proxy. Technical details are documented on the Info page.
[Security information](/info)

## Changes to This Policy

### Updates

This policy is updated when site behavior changes. The version and update date at the top of this page identify the current policy.

## Contact

### Privacy Questions

**Email**

jay@banes-lab.com

**Note**

Responses are best-effort and not guaranteed within a fixed window.

There is no personal information to entrust to me, and I intend to keep it that way.