MANA Labs

Privacy Policy

This policy covers manalabs.com. The data controller is Mana Labs (“we”, “I”), a sole proprietorship (eenmanszaak) registered with the Dutch Chamber of Commerce under KvK number 42116400, owned by Michael Zijlstra, in the Netherlands. Questions, corrections and deletion requests go to info@manalabs.com.

Reading the site

You can read every page here without an account, and doing so collects nothing about you. There is no analytics, no advertising, and no tracking cookie.

The site also makes no third-party requests: fonts, scripts and images are all served from manalabs.com, so simply loading a page does not tell any other company that you were here.

Our web host keeps standard server logs (IP address, time, page requested, browser user-agent) for security and troubleshooting, as essentially all web servers do. We do not use those logs to build any profile of you.

Signing in to comment

Commenting requires signing in with Google or GitHub. We never see your password for those services. When you sign in, we receive and store:

  • the provider you used, and your account identifier at that provider;
  • your display name;
  • your email address, where the provider supplies a verified one;
  • your profile picture, which we copy to our own server rather than loading it from theirs — so viewing a comment thread does not report you to Google or GitHub;
  • your public profile URL, where the provider supplies one.

Signing in with Google and later with GitHub creates two separate accounts here. We do not link accounts by matching email addresses, because doing so would be a way for someone to take over another person's comment history.

Comments

We store the text of your comment, when it was written, and when it was last edited. Comments are public: anyone visiting the post can read them, along with your display name and picture.

We also store a one-way hash of the IP address a comment was posted from, used only to limit spam and abuse. It is hashed with a secret key and cannot be turned back into your address.

Email we send

Two kinds:

  • To the site owner. New comments generate a notification so they can be reviewed before publication.
  • To you. If someone replies to your comment, we email you — only if the provider gave us a verified address. Every one of those emails has an unsubscribe link, and unsubscribing is immediate.

Mail is sent through our hosting provider's mail server. We do not use your address for anything else, and we do not send newsletters or marketing.

Cookies

One cookie, named manalabs. It holds your session after you sign in and nothing else. It is strictly necessary for commenting to work, it is not used for tracking, and it disappears when you sign out or close your browser. If you never sign in, the site never sets it.

Who else sees your data

Nobody. We do not sell, rent or share personal data. The only third parties involved are the ones you choose to sign in with (Google or GitHub), our web host, which stores the site and its database, and the mail server that delivers the notifications above.

How long we keep it

Comments and the account behind them stay until you ask us to remove them, or until we remove them for breaching the terms. Hashed IP addresses are kept only as long as they are useful for abuse prevention. Server logs follow our host's retention schedule.

Your rights

You can ask us to show you what we hold about you, correct it, or delete it. Email info@manalabs.com and we will act on it. Deleting your account removes your stored profile details; comment text is removed with it unless the surrounding conversation makes that impossible, in which case it is anonymised instead.

We are established in the Netherlands, so the GDPR applies. Beyond access, correction and deletion you may also object to processing, ask for your data in a portable form, and withdraw consent at any time.

If you think we are handling your data wrongly, you can complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or to the authority in your own EEA country.

Children

This site is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has commented here, email us and we will remove it.

Changes

If this policy changes in a way that matters, the date at the top of this page changes with it.