ObaLab← Back
Legal

Privacy Policy

Last updated: August 26, 2026

This page explains exactly what happens to your data when you visit this site or book a call. It is short because the site does very little with your data.

This site sets no cookies

No cookies. No advertising pixels, no retargeting tags, no cross-site tracking, and nothing that follows you to another website. The only thing this site stores in your browser is a single analytics identifier held in sessionStorage, which your browser throws away when you close the tab.

Why there is no consent banner: that identifier exists solely to count visits and see which pages work — audience measurement, strictly limited to this site, never shared, never used to build a profile of you, and never used for advertising. Under the French data protection authority’s guidance, measurement of that kind may be operated without prior consent. Session recording is switched off. If that ever changes, this page changes first and you get asked.

Who runs this site

Analytics

We use PostHog on its EU region, so analytics data is stored on servers in the European Union. It is configured to run cookieless: it keeps its identifier in your browser’s sessionStorage, which your browser deletes the moment you close the tab. Come back tomorrow and you are a new, unrecognised visitor.

What it records: pages viewed, clicks and scrolls on those pages, device and browser type, referring site, and an approximate location (country or region) derived from your IP address. We never call PostHog’s identify function, so no analytics event is ever attached to your name or email.

Legal basis: our legitimate interest in understanding whether the site works. Any content blocker stops it entirely, and closing the tab wipes what it stored.

Booking a call

Scheduling runs on Calendly, embedded on our booking page. When you book, you give Calendly — and therefore us — your name, email address, phone number, your social handle, and your answers to the booking questions (business context, revenue range, goals). Calls themselves run on Google Meet.

Legal basis: taking steps at your request before entering into a contract. The Calendly embed is served from calendly.com and is governed by Calendly’s own privacy policy; anything it stores in your browser belongs to Calendly, not to this site.

Hosting and server logs

The site is delivered by Cloudflare, acting as our processor for hosting and as a sub-processor for delivery and security logs. Cloudflare processes your IP address and request metadata to serve the page and to block attacks. We do not build profiles from those logs.

Who else sees your data

Only the three providers named above: PostHog (analytics), Calendly (scheduling) and Cloudflare (hosting), each acting on our instructions. We do not sell your personal information, we do not share it with advertisers, and we do not trade it with anyone.

PostHog keeps our analytics data in the EU. Calendly and Cloudflare are US companies, so booking data and request logs may be processed in the United States under the transfer safeguards set out in their own privacy policies.

How long we keep it

Analytics: nothing about you persists in your browser past the tab you close, and event data sits in PostHog under its standard retention. Booking details: kept while we are in conversation and for a reasonable period afterwards for our records, unless you ask us to delete them sooner or the law requires us to keep them longer.

Your rights

If you are in the EU or UK you can ask us to give you a copy of your data, correct it, delete it, hand it over in a portable format, restrict what we do with it, or object to our using it at all. We answer within one month.

To make a request, book a slot at obalab.org/book or message us on X. We do not publish an email address on this site, so those are the two routes. You can also complain to your local data protection authority.

Changes

If we change how any of this works, we update this page and the date at the top of it.