Privacy Policy

1. Who we are

The Site is operated by Lyndhurst Labs LLC, a limited liability company organized under the laws of the State of New York. For the purposes of applicable data protection law, Lyndhurst Labs is the "controller" of personal information collected through the Site.

You can reach us regarding this Policy at hello@lyndhurstlabs.com.

2. Information we collect

2.1 Information you provide to us

We only collect personal information that you choose to give us directly, for example if you contact us by email. This may include:

• Your name
• Your email address
• Your company or organization
• The contents of any message you send us

We do not require you to create an account to use the Site, and we do not knowingly collect sensitive personal information.

2.2 Information collected automatically

When you visit the Site, certain technical information is collected automatically through our analytics tools and hosting infrastructure, such as:

• Pages viewed and referring pages
• Approximate location, typically derived from IP address and not stored in identifiable form by our analytics providers
• Browser type, device type, and operating system
• Date and time of your visit

The specific data collected, and whether it is tied to you, depends on the analytics providers described in Section 4.

3. How we use your information

We use the information we collect to:

• Respond to inquiries and communicate with you
• Operate, maintain, and secure the Site
• Understand how visitors use the Site so we can improve it
• Monitor Site performance and reliability
• Comply with legal obligations and enforce our terms

We do not sell your personal information, and we do not use it for third-party advertising or profiling.

4. Analytics

We use third-party analytics services to understand Site traffic and performance.

4.1 Vercel Web Analytics & Speed Insights

The Site is hosted on Vercel and uses Vercel Web Analytics and Vercel Speed Insights to measure traffic and performance. Vercel Web Analytics is privacy-friendly and does not use cookies. Instead of cookies, visitors are identified by an anonymized hash generated from the incoming request; that hash is valid for a single day and then automatically reset, so visitors cannot be tracked across days or across different websites. The data collected is anonymous and aggregated and is not used to identify individual visitors. Speed Insights similarly records anonymous performance data, such as Core Web Vitals, without identifying you.

For more information, see Vercel's privacy documentation at https://vercel.com/legal/privacy-policy.

5. Legal bases for processing (EEA/UK visitors)

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Legitimate interests to operate, secure, and improve the Site, and to understand how it is used through privacy-preserving analytics.
• Consent where required by law, we will obtain your consent before collecting that information.
• Performance of a contract / pre-contractual steps when we respond to and act on your inquiries.
• Legal obligation where processing is necessary to comply with the law.

6. How we share information

We do not sell or rent your personal information. We may share information with:

• Service providers who help us operate the Site, currently our hosting and analytics provider (Vercel), who processes data on our behalf or as described in its own privacy policies.
• Legal and safety purposes if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Lyndhurst Labs or others.
• Business transfers in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Policy.

7. Data retention

We retain personal information only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law. Aggregated and anonymized analytics data may be retained for longer, as it cannot reasonably be used to identify you. Correspondence you send us is retained for as long as needed to address your inquiry and our records.

8. Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• The right to access the personal information we hold about you
• The right to correct inaccurate information
• The right to delete your information
• The right to object to or restrict certain processing
• The right to data portability
• The right to withdraw consent where processing is based on consent
• The right to opt out of the sale or sharing of personal information (we do not sell or share personal information)

To exercise any of these rights, contact us at hello@lyndhurstlabs.com. We will respond within the timeframe required by applicable law. You will not be discriminated against for exercising your rights. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

9. Do Not Track and Global Privacy Control

Some browsers offer a "Do Not Track" (DNT) signal or a Global Privacy Control (GPC) signal. Because there is no common industry standard for DNT, the Site does not currently respond to DNT signals. Where required by law, we honor recognized opt-out preference signals such as GPC.

10. International data transfers

We are based in the United States, and our service providers may process data in the United States or other countries. If you access the Site from outside the United States, your information may be transferred to, stored, and processed in a country with different data protection laws than your own. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses, for such transfers.

11. Children's privacy

The Site is intended for a general, professional audience and is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, or misuse. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

13. Third-party links

The Site may contain links to third-party websites or services that we do not operate. This Policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we will take reasonable steps to notify you. Your continued use of the Site after changes take effect constitutes acceptance of the revised Policy.

15. Contact us

If you have questions about this Privacy Policy or how we handle your information, please contact: