Legal

🔒

Simple and transparent.

Here's exactly what Experience Lab does and doesn't do with your data.

Last updated: April 2026

💻
Your browser
Form inputs, generated code
localStorage only (anonymous prefs)
account only (if signed in)
never sent (tool configs)
🗄️
Browser storage
Theme, name preference
☁️
Our servers
Email + presets (account only)

✓ What we do

Remember your theme preference (locally)
Store your email if you create an account
Save named presets if you're signed in

✗ What we don't do

Track individual users or sessions
Sell or share your data with third parties
Store tool form inputs on our servers
Receive emails captured by your generated modals

Using without an account

The tools work entirely in your browser. No account is required and no data is sent to our servers. Generated code, configuration settings, and any text you enter into the tools stay on your device.

Account data (if you sign up)

If you create an account, we store your email address and authentication credentials securely via Supabase. If you save presets, those configurations are stored in our database linked to your account. This data is retained until you delete your account.

You have the right to request deletion of your account and all associated data at any time — use the Delete Account option on your account page or contact support.

Cookies & local storage

Experience Lab uses your browser's localStorage to store:

  • Your light/dark mode preference
  • Your first name, if you choose to personalize the greeting — stored locally in your browser only and never sent to our servers
  • A flag to distinguish first-time from returning visitors (used for the greeting experience only)

No tracking cookies. No analytics cookies. No cross-site identifiers.

Analytics

Experience Lab does not currently run any analytics. In the future, privacy-respecting, cookieless page-view analytics (such as Plausible or Fathom) may be added to understand aggregate traffic. These tools do not track individual users, do not use cookies, and are not used for advertising.

Third-party integrations

When you configure an email platform integration and generate a script, the resulting code runs on your website — not ours. Any data submitted through that modal goes directly to the platform you configured. Experience Lab never receives or stores email addresses collected by your modals.

Consent-aware mode (coming soon)

Experience Lab is working on built-in integration with consent management platforms (OneTrust, TrustArc) to automatically respect visitor consent choices before showing modals. Until this is released, you are responsible for implementing consent checks in your generated code if your site uses a CMP.

Data Processing Agreement

A Data Processing Agreement (DPA) is available upon request for organisations that require one for GDPR compliance. Contact us to discuss your requirements.

Children

Experience Lab is not directed at children under 13. We do not knowingly collect any personal information from children.

Changes

If we make material changes to this policy, we'll update the date at the top of this page. Continued use of Experience Lab after changes constitutes acceptance.