§LegalDraft
Privacy
Effective {{LAUNCH_DATE}}. A draft adapted from the products' policy drafts. It is not legal advice, and a lawyer reads it before the first sale.
This page covers the 8020 Lab website, 8020lab.com, including the AI Security Tracker at /ai-incidents/ and the free guides. Each product publishes its own full policy when it goes on sale. The summary below says what each product does with data.
Who is responsible
Brass Tacks, Inc., doing business as 8020 Lab, {{ADDRESS}} ("the Seller") runs this website and makes the products on it. Privacy contact: privacy@8020lab.com.
What this website collects
Nothing on purpose. No cookies, no analytics, no advertising, no tracking pixels, no forms, and no third-party scripts, fonts or embeds. Every file is served from 8020lab.com.
- Server logs. The hosting provider, Cloudflare, Inc. (Cloudflare Pages), records standard request data to serve and protect the site: network address, time, page requested and browser type. They are kept for {{LOG_RETENTION}} under the host's own policy (cloudflare.com/privacypolicy).
- The tracker as an app. If you install the AI Security Tracker, its service worker keeps a copy of pages in your browser so they open offline. Nothing is sent back.
- Email. If you write to the Seller, including to hear when a product ships (the "Tell me when it ships" buttons open an email to hello@8020lab.com), your address and message are kept to answer you, for 2 years after the conversation ends. Mail to the 8020lab.com addresses is forwarded by Cloudflare Email Routing.
- Early adopter notes. If you send feedback and agree in writing to its publication, the note is published on Early adopter notes with the name you choose and the price you paid. Write to privacy@8020lab.com to withdraw it at any time, and it is removed.
What each product does with data
| product | stays on your device | leaves it, and only when |
|---|---|---|
| Lantern | recordings, guides, the library | the speech model download, asked for first; a cloud AI provider only if you choose one and agree; the update check to {{UPDATE_HOST}} |
| Twice | the clipboard history, one file on your PC | nothing you copy; a Pro licence key, sent to Polar once to check it |
| Demo Shield | page content it masks, settings, picks, client terms | a Pro licence key, sent to Polar to check it |
| StepSpec | recordings, consent, settings | a Pro licence key, sent to Polar to check it |
| Ship It for X | the library, your profile, your API key | the prompts you send, to claude.ai or to api.anthropic.com with your own key; a Pro licence key, sent to Polar |
None of the products has analytics, advertising or tracking.
Who processes data for the Seller
- Cloudflare, Inc., which serves this website and forwards mail to the 8020lab.com addresses.
- Polar Software, Inc., the merchant of record for the software products, once they go on sale (polar.sh/legal/privacy-policy). The Seller never sees card details.
- Stripe, Inc., for invoices the Seller sends for services (the release-docs pilot).
- The email provider used for support.
Some providers are in the United States; transfers rely on the EU-U.S. Data Privacy Framework or standard contractual clauses.
Your rights
Depending on where you live, you may ask for access to, correction or deletion of your data, restriction of or objection to its use, and a portable copy. Write to privacy@8020lab.com. You may also complain to your data protection authority.
{{EU_REP}} {{UK_REP}}
Children
Not directed at children under 16. No data is knowingly collected from them.
Changes
Material changes are announced on this page before they take effect, with a new effective date.