In short
There are no accounts, no analytics, no ads and no tracking. Your progress, settings and code drafts stay in your own browser and are never sent to us. Our hosting provider keeps standard server logs for security. If you email us, we use your message only to reply.
Who we are
Tinker Lab is run by The Lycoris Labs Inc., Dubai, United Arab Emirates ("we", "us"). For the limited personal data described below, we are the data controller. You can reach us about privacy at .
What we collect
Through the website itself: nothing. You do not sign up, log in or give us your name, age, email address or any other detail to use Tinker Lab. We do not run analytics, advertising or tracking scripts, and we set no cookies.
Data stored in your browser
To remember your progress, quiz answers, settings and code drafts, the site saves small entries in your browser's local storage, under keys that begin with tinkerlab:. This data is created and kept on your device. It is not sent to us or to anyone else, and we cannot see it. You can view and delete it at any time; the cookie policy explains how and has a button that clears it.
If you type a name for your certificates and badges, it is saved the same way, only on your device. It leaves your device only when you choose to share a certificate: the share link and the image carry the name you typed. Children should ask a parent or teacher before sharing their full name online.
Server logs
Tinker Lab is a static website. Like any website, it is delivered by a hosting provider, Vercel Inc., whose servers automatically record standard technical information when your browser requests a page: your IP address, your browser's user agent, the page requested, the time and the response. These logs are used to keep the service secure and working, for example to detect abuse. They are kept for a limited period set by the provider. We do not combine them with other data or use them to build a profile of you.
Emails you send us
If you email us, we receive your email address, your message and anything you attach. We use it only to reply to you and to deal with what you asked about.
Why we use it, and our legal basis
- Server logs: our legitimate interest in keeping the website secure and available.
- Emails: our legitimate interest in answering you, or taking steps you asked for.
- Browser storage: this stays on your device and is not processed by us. It is used only to provide features you use.
What we never do
- We do not sell, rent or trade personal data.
- We do not show advertising or allow advertising networks on the site.
- We do not use analytics, tracking pixels, fingerprinting or session recording.
- We do not send what you type or build to AI services or any other third party.
- We do not load fonts, icons or scripts from other companies' servers. They are served from this site.
Who else is involved
Only the service providers needed to run the site and answer email: our hosting provider (for the server logs above) and our email provider (for messages you send us). They process data on our behalf and under their own security obligations. We do not share data with anyone else unless the law requires it.
Pages may link to other websites, such as the open-source projects we credit. Those sites have their own privacy policies.
How long we keep it
- Browser storage: until you clear it. We have no copy.
- Server logs: for the limited period set by our hosting provider, then deleted.
- Emails: for as long as we need to deal with your message, then deleted.
Children's privacy
Tinker Lab is made to be used by children as well as adults. We do not collect personal data from anyone, children included: there are no accounts, no profiles, no chat and no forms. Progress is kept only on the device being used.
If a child emails us, we use the message only to reply, and we may suggest that a parent, guardian or teacher gets in touch instead. If you are a parent or guardian and believe your child has sent us personal information, contact and we will delete it.
If we ever add accounts or any other feature that collects personal data, we will ask for verifiable consent from a parent or guardian for children below the age set by the law that applies to them (for example 13 in the United States under COPPA, 13 in the United Kingdom, and between 13 and 16 in the European Union, depending on the country). We will update this policy before any such feature goes live.
Your rights
Depending on where you live, you may have the right to ask for access to your personal data, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable form. Because we hold almost nothing about you, most of these rights are easiest to use yourself: clear your browser storage, or ask us to delete an email conversation.
To make a request, write to . You also have the right to complain to your local data protection authority.
Security
The site is served over an encrypted connection (HTTPS). Because we collect no accounts and no personal data through the site, there is no database of users that could be exposed.
International transfers
Our hosting and email providers may process server logs and emails in countries other than yours. Where the law requires it, these transfers are covered by appropriate safeguards, such as standard contractual clauses.
Changes to this policy
If what we collect changes, we will update this policy first and change the effective date at the top. A significant change, such as adding accounts, will be announced on the site before it takes effect.
Contact
The Lycoris Labs Inc., Dubai, United Arab Emirates. Email: .