DION LABS / PRIVACY / 13 SEPTEMBER 2026

Privacy, in plain words.

DionLabs is an independent software lab run by D in Italy. D is responsible for the lab’s processing of personal data and can be contacted at support@dionlabs.ai. This page covers the public lab sites; the linked product notices explain additional processing when you use a product.

What the sites collect

Where enabled, Cloudflare Web Analytics provides aggregate traffic measurements without analytics cookies. Product analytics and consent choices are described in the product notices. Cloudflare also processes ordinary request data needed to serve and protect the sites. We do not run advertising trackers.

When you give us information

Boxie’s optional beta-interest form checks your Android, personal Outlook and testing-commitment answers. It stores your email address, consent version, submission and expiry times, and a hashed withdrawal receipt so we can review interest and contact testers. Eligibility answers are validated rather than stored as separate questionnaire records. Applications expire after 30 days and are removed by a daily cleanup; you can withdraw earlier using your receipt. Short-lived abuse-prevention counters use a keyed hash derived from the request IP address and hour, rather than storing the raw IP address in the application database. The form uses Cloudflare D1 storage. Boxie’s product privacy page explains its mailbox, optional cloud-vault, feedback, and deletion flows in more detail.

FolioDuet supports guest sessions and Google sign-in. Its optional cloud features use Firebase for account identifiers, library metadata, reading progress, processed document text and saved settings. Original imported PDFs stay on the importing device in the current design. Optional speech providers receive the text you choose to play. Feedback and analytics have their own controls. See FolioDuet’s privacy notice for these details and deletion options.

Signals uses Firebase for article view and like counts, with browser storage to avoid repeated counts. These interactions send requests to Google/Firebase. For the Stream Deck Micro site, see its privacy notice.

If you email us, we receive your address, message, and normal email metadata. We use them to answer you and handle the request.

Why information is processed

We process information needed to provide a feature you request, respond to support requests, and protect the sites against abuse. Optional beta contact relies on the consent given on the form; optional product analytics follow the product’s consent controls. Hosting and security processing support our legitimate interest in operating reliable sites. Cloudflare, Google/Firebase, Microsoft and optional speech providers may process data internationally under their applicable service terms and data-protection safeguards; this notice does not promise EU-only storage.

Retention and your choices

We keep submitted information only as long as needed for its stated purpose, security, legal obligations, or the product-specific period shown when you submit it. You can ask for access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. You may also complain to your local data-protection authority, including Italy’s Garante.

Contact

Email support@dionlabs.ai with privacy questions. Do not send passwords, access tokens, or private mailbox contents.