Privacy
Privacy Policy
This site sets no cookies, runs no analytics and loads no third-party scripts. The only personal information we hold is what you choose to type into a form.
Last updated
Who we are
Broaden Labs operates this website. For any question about this policy, or to exercise any of the rights described below, email hello@broadenlabs.com.
What we collect, and only what we collect
We do not use cookies, analytics, advertising pixels, session recording or any third-party script. Browsing this site does not create a record of you.
If you submit the project inquiry form
- First and last name
- Email address
- Company name and website, if you provide them
- Project type, estimated budget and timeline
- Your message, and the project summary if you use the planner
- How you heard about us, if you tell us
- Your consent to be contacted
If you subscribe to updates
- Your email address, and whether the subscription is pending, confirmed or cancelled.
Collected automatically when you submit a form
These exist to stop abuse of a public, unauthenticated endpoint. Nothing else is recorded.
- A one-way salted hash of your IP address — never the address itself — used only to rate-limit abuse
- How long the form took to complete, used to detect automated submissions
- A random request identifier, used to correlate server logs
Your IP address is never written to our database. It is combined with a secret and hashed one way, so the stored value can confirm that two submissions came from the same source but cannot be turned back into an address.
Why we hold it
To reply to your enquiry, to send the updates you asked for, and to rate-limit automated abuse. We do not sell personal information, share it for advertising, or use it to build a profile of you. We do not make automated decisions that produce legal or similarly significant effects.
Where the law requires a lawful basis, ours is your consent for updates, and our legitimate interest in responding to enquiries and protecting the service from abuse.
Who else can see it
Only the providers that run the site. Each processes data on our instructions and nothing more.
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Website hosting and content delivery | United States |
| Neon Inc. | Managed PostgreSQL database storing form submissions | United States (AWS us-east-1) |
Both are located in the United States. If you contact us from outside the United States, your information will be transferred to and stored there.
How long we keep it
Enquiries are kept for 24 months from your last contact with us, then deleted. Subscriptions are kept until you unsubscribe. Abuse-prevention records are kept for 12 months. We will delete anything sooner if you ask.
Your rights
Depending on where you live, you may have the right to access the information we hold about you, correct it, delete it, obtain a copy of it, object to or restrict how we use it, and withdraw consent at any time. If you are in the EU or UK you may also complain to your data protection authority. If you are in California, you have the rights described in the CCPA as amended, including the right not to be discriminated against for exercising them — and note that we do not sell or share personal information as those terms are defined there.
Broaden Labs operates from Connecticut. If you are a Connecticut resident, the Connecticut Data Privacy Act gives you rights to confirm whether we process your personal data, access and correct it, delete it, obtain a portable copy, and opt out of targeted advertising, sale, or profiling with legal effects. We do none of those last three. We honour these requests from anyone who makes one, whether or not the Act's thresholds apply to a studio of our size, and you may appeal a refusal by replying to our response.
To exercise any of these, email hello@broadenlabs.com. We will respond within 30 days. We may ask you to confirm the email address you originally used, because it is the only identifier we hold.
Children
This site is for business enquiries and is not directed at children. We do not knowingly collect information from anyone under 16.
Security
The site is served over HTTPS with strict transport security. Form submissions are validated on the server, rate limited, and protected against cross-site request forgery. Access to submissions is limited to the people who need it to reply to you. No system is perfectly secure, and we do not claim otherwise.
Changes
If we change this policy we will update the date at the top of this page. Material changes will be described here rather than made quietly.