Privacy
Privacy.
Last updated
This is the privacy notice for librilabs.com. We run the site without cookies, without trackers, and without sharing visitor data with any third party — and this page explains exactly what that means in practice.
Who runs this site.
librilabs.com is operated by LibriLabs LLC, a Florida-registered studio at 7901 4th St N #28782, St. Petersburg, FL 33702, USA. Reach us at info@librilabs.com or +1 561 552 5040. LibriLabs LLC is the US operating entity — we have no EU establishment.
What this site collects.
Two surfaces, and only two. The Caddy reverse proxy in front of the site records server logs (IP address, user agent, requested URL, response code, timestamp) for security and diagnostics. Self-hosted Plausible at plausible.librilabs.com records aggregate statistics (page views, referrer, country-level geolocation, screen size). No contact forms, no comments, no accounts, no tracking cookies.
Why we collect it.
Server logs serve security monitoring, abuse diagnostics, and uptime/error debugging. The analytics serve one purpose: knowing which pages are read so we can write better ones. No marketing profiles, no behavioural scoring, no sharing with third parties.
Legal basis (GDPR).
We process both surfaces under GDPR Article 6(1)(f) — legitimate interest. The data is minimal and aggregate; the realistic alternative would be either no analytics at all or third-party trackers, and we prefer this one. We do not rely on Article 6(1)(a) consent because there are no cookies or trackers to consent to.
Who we share it with.
Nobody. Plausible is self-hosted on a Hetzner VPS in Germany behind Caddy — no third-party analytics processor sees the data. Server logs live on that same VPS and are not exported. The stack is Hetzner (Germany) → Caddy → containerized Next.js + Plausible.
How long we keep it.
Caddy access logs rotate and are deleted within 30 days on the host. Plausible holds aggregate stats as long as the Plausible service holds them — currently retained indefinitely in aggregate form per the Plausible docs; the data is aggregate-only and not reducible back to a single visitor, which is why we judge the storage-limitation balance to favour keeping it. Email correspondence with info@librilabs.com is kept as long as it's useful for the conversation, then deleted.
Your rights.
Under GDPR you have the rights of access, rectification, erasure, restriction of processing, objection, data portability, and the right to lodge a complaint with a supervisory authority. Email info@librilabs.com to exercise any of them. We respond within 30 days, usually faster. EU residents can complain to their national data-protection authority — which one is up to you, since the controller is US-based.
No automated decision-making.
We don't profile visitors and we don't make automated decisions about you that produce legal or similarly significant effects, within the meaning of GDPR Article 22. The site reads the same to everyone.
Updates to this notice.
When this notice changes, the last-updated date at the top moves and the change is noted in the company changelog. We don't quietly rewrite history. Questions go to info@librilabs.com.