NestLab

Privacy Policy

Last updated: 2026-07-31 · Effective: 2026-07-31

1. Who we are

NestLab is the trading name of an unincorporated software studio operated by Aleks NestLab (the "operator", "we", "us"). The data controller for this site is Aleks NestLab. Our full legal identity and contact details are on the Imprint page.

For data subject requests under the EU GDPR, write to admin [at] nestlab [dot] tech. We reply within 30 days.

2. What this site is

nestlab.tech is a static marketing site served by Cloudflare Workers Static Assets. It presents the NestLab portfolio, four flagship products, and our open-source work. The site is informational only — there is no signup form, no payment, no user-generated content, no analytics tracker.

3. What data we collect

When you browse this site, we collect only:

  • Cloudflare request logs — IP address, User-Agent, request path, TLS fingerprint. Retained by Cloudflare for up to 30 days for security and abuse detection. This is processing necessary for the operation of the site (Art. 6(1)(f) GDPR, legitimate interest).
  • Email you send us — if you write to any of our four email aliases. We retain email correspondence for as long as the business relationship requires, then archive it.

We do not collect: name, address, phone number, payment data, browsing history across other sites, advertising identifiers, or any special-category data.

4. Cookies

This site uses only Cloudflare's _cfuvid cookie, which is a functional cookie (bot detection, security). It does not require consent under ePrivacy. See Cookie Policy.

5. Subprocessors

We use the following subprocessors to operate this site:

  • Cloudflare, Inc. — CDN, edge compute, DNS. EU edge, US headquarters. DPA in place.
  • Google Fonts — typography (Inter, Inter Tight). EU delivery. Google's privacy policy applies for the request itself.

Full subprocessor list for our products: Subprocessors.

6. International transfers

Cloudflare processes EU-edge traffic. The only US-border transfer is Cloudflare's internal operations and Google Fonts' request (which is a no-PII HTTP request to a Google CDN). Both are covered by Standard Contractual Clauses.

7. Retention

Cloudflare logs: 30 days. Email correspondence: business-relationship lifetime. After retention expires, data is deleted within 30 days.

8. Your rights under GDPR

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with your supervisory authority. Contact details: admin [at] nestlab [dot] tech.

9. When we add analytics

If we add PostHog, Plausible, or any other analytics on this site, we will:

  • add a Consent Mode v2 cookie banner with granular categories;
  • update this privacy policy with the new subprocessor and retention rules;
  • update the Cookie Policy;
  • document the change in the changelog below.

10. Changes

Material changes will be posted on this page with a new "Last updated" date and a summary of what changed.

Changelog

  • 2026-07-31 — Initial publication. NestLab portfolio site relaunch.