Privacy policy
What this site collects, why, and how to have it deleted.
NoOne LABS (“we”) runs noonelabs.xyz. This page explains which personal data the site handles and why. For questions or requests, write to info@noonelabs.xyz.
Browsing the site
- No analytics, no advertising, no tracking cookies. We don’t profile visitors.
- The site is hosted on Amazon Web Services (CloudFront and S3). We don’t keep logs of your visits.
- Your browser loads fonts from Google Fonts and JavaScript libraries from unpkg.com. These services receive your IP address when they deliver those files, under their own privacy policies.
- Embedded videos load from YouTube, Vimeo or X only when you press play. Until then, previews of linked pages and posts are copies stored on this site.
Reactions
Reactions don’t need an account. To count one reaction per person, we keep a keyed hash of your IP address for 90 days; the address itself can’t be recovered from it. If you are signed in, your reaction is linked to your account instead.
Comments and sign-in
To comment, you sign in with GitHub or with a code sent to your email address. We then process:
- From the sign-in service: an account identifier, your name and username, and your email address. These are kept in Amazon Cognito, our sign-in service.
- On the blog: your display name, how you signed in, your comments and their dates. Your display name and comments are public. Your email address is never shown, and we use it only to sign you in.
- Sign-in codes are sent by email through Amazon SES. Each one works once, for a short time.
- New comments are also emailed to us so we can moderate them.
We do this to provide the comment service you ask for (Article 6(1)(b) GDPR). Comments stay until you delete them or we remove them while moderating. Your account stays until you ask us to delete it, together with your comments.
To prevent abuse, sign-in attempts, comments and reactions are counted per account or per hashed IP or email address. These counters expire within a day.
Cookies
The site only sets cookies that signing in needs. They are strictly necessary, so they don’t require consent.
| Cookie | Purpose | Lifetime |
|---|---|---|
__Host-nl_session | Keeps you signed in | 30 days |
__Host-nl_flow, __Host-nl_email | Remember a sign-in in progress | 10 minutes |
Who processes the data
- Amazon Web Services EMEA SARL (Luxembourg) hosts the site, the comments and the sign-in service, in the EU (Frankfurt).
- GitHub, Inc., if you sign in with GitHub, under GitHub’s own privacy statement.
Some providers may process data outside the EU. When they do, it is under the safeguards the GDPR requires, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
Technical logs of the comment service are kept for 14 days for security and troubleshooting.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its processing, or to receive a copy in a portable format: write to info@noonelabs.xyz. You can also complain to a data protection authority; in Italy, that is the Garante per la protezione dei dati personali.
Changes
If this policy changes, we’ll update this page and the date above.