Privacy Policy

This policy covers lucidcodelabs.com. It does not cover the products we build for clients, or the InnerSphere app, which has its own privacy policy.

1. Who is responsible

The controller for the purposes of the GDPR is Lucid Code Labs, [street], [postcode] Berlin, Germany. You can reach us at info@lucidcodelabs.com. Full provider details are in our Impressum.

We have not appointed a Data Protection Officer, as we are not required to.

2. What we collect, and why

2.1 Server logs

Our host records the usual technical information when you load a page: your IP address, the page requested, the time, your browser and operating system, and the referring page. This is what makes serving the site and defending it against abuse possible.

2.2 Analytics

We use Vercel Analytics and Vercel Speed Insights to see which pages are visited and how quickly they load. Vercel states that these products do not use cookies and do not track visitors across sites; measurements are aggregated rather than tied to a person.

2.3 Advertising

We use the Meta pixel to measure advertising we run on Facebook and Instagram, and to build audiences for it. On every page of this site it records the page you viewed, your IP address, your browser and device type, and sets two cookies belonging to Meta: _fbp, and _fbc if you arrived by clicking one of our ads. Meta may combine this with data it already holds about you.

The pixel loads on every page and we do not currently ask for your consent before it does. Section 6 explains how to stop it.

2.4 Contact form and email

Our contact form is provided by Tally, and is embedded from their servers. Whatever you enter — typically your name, email address and your message — is submitted to Tally and forwarded to us. If you email or call us directly instead, we hold that correspondence in our mailbox in order to answer you and keep a record of what was agreed.

3. Legal bases

• Serving the site and keeping it secure — our legitimate interest in operating a functioning, defended website (Art. 6(1)(f) GDPR).
• Answering your enquiry — taking steps at your request before entering into a contract, or our legitimate interest in responding to you (Art. 6(1)(b) and (f)).
• Analytics and advertising — see the note below.

Under the ePrivacy rules, storing or reading cookies for advertising normally requires your prior consent, and this site does not currently ask for it. We are reviewing that. In the meantime you can block the pixel using the methods in Section 6, and you may object to this processing at any time.

4. Who receives your data

• Vercel — hosting, server logs, analytics and performance measurement.
• Meta Platforms Ireland — advertising measurement and audiences.
• Tally — the contact form and its submissions.
• Zoho — our email, so anything you send us by email passes through it.

We do not sell your personal data, and we do not share it with anyone else except where the law requires it.

5. Transfers outside the EU

Some of these providers are based in, or transfer data to, the United States. Those transfers rely on the EU Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for details of the safeguards that apply.

6. Your choices

• Blocking third-party scripts or cookies in your browser, or using a tracking blocker, stops the Meta pixel loading.
• You can limit how Meta uses your data for advertising in your Meta account settings, including its off-Facebook activity controls.
• You can contact us by phone or email instead of using the contact form, which avoids Tally entirely.

7. How long we keep things

• Server logs: a short period, for security and troubleshooting.
• Analytics: aggregated, and retained per Vercel's own retention periods.
• Enquiries and correspondence: as long as needed to deal with your enquiry, and afterwards where commercial or tax law requires us to keep records.
• Advertising data held by Meta: subject to Meta's own retention policy.

8. Your rights

You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we process it, and to receive it in a portable form. Where processing is based on consent, you may withdraw it at any time without affecting what was done beforehand. Write to info@lucidcodelabs.com and we will respond within one month.

You also have the right to complain to a supervisory authority. For us that is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, though you may complain to the authority where you live instead.

9. Changes

If we change how we handle personal data we will update this page and the date at the top of it.

This policy describes what the site actually does today rather than what it might do. If you spot something here that does not match your experience of the site, please tell us.