Doyel Labs Privacy Policy
This policy belongs to Doyel Labs LLC, a Wyoming limited liability company in Casper, Wyoming.
It covers what happens to your information when you visit doyel-labs.com, when you contact
us, and when we build or host software for you. BAI has its own privacy notice at
/legal/bai/privacy/; ConnectionLoop's notice ships inside the app.
When you visit this website
We measure traffic, and this section says exactly how. The paragraphs below are selected automatically from the configuration the site was built with, so what you read here matches what actually runs.
The public pages on doyel-labs.com use Cloudflare Web Analytics. It is the only
visitor analytics provider selected for this website.
- Cloudflare's browser beacon measures page views, referral information, broad browser, device and operating-system categories, approximate country, and page-performance timings. These describe website activity, not named visitors.
- The beacon does not use cookies, local storage, persistent browser identifiers, or fingerprinting to track people across sites or sessions.
- Cloudflare receives the source IP address when handling a beacon request and states that its RUM service discards it at the nearest data center rather than retaining it. Our dashboard does not request, display, or store raw IP addresses.
- Cloudflare does not log URL query strings. Our dashboard also removes query strings and fragments and shows only referral hosts, never full referral URLs.
- Cloudflare keeps about six months of Web Analytics data. We do not create a separate visitor-event database from it.
We use these aggregate reports to understand which pages are useful. We do not use them for advertising, retargeting, or linking contact inquiries to browsing activity. Cloudflare's own RUM privacy information describes its processing.
Approximate city and region counts
We also keep first-party approximate location counts for published public pages. When a page loads, your browser sends one same-origin request containing only the page path, without query string, fragment, referrer, or cookies. The server validates and then discards that path. Cloudflare attaches an approximate country, region, and city to the request from its own network data; we never ask for GPS, a postal address, or coordinates. VPNs and mobile networks can mislocate activity, and missing locations are grouped as unknown.
Our Cloudflare D1 database stores only hourly country/region/city counters, a daily admission total, and the hour collection first received data. It never stores raw events, IP addresses, paths, referrers, user agents, visitor IDs, cookies, fingerprints, or per-person profiles. These are page views, not unique visitors.
Collection honors the Global Privacy Control and Do Not Track signals your browser can send, stops after 5,000 accepted page views per UTC day, and does not run on preview or development hostnames. Hourly aggregates are retained for about 31 days and cleaned up hourly. Cloudflare D1's built-in backups may retain deleted aggregates for up to 30 additional days.
No session replay, no ad pixels. There is no Google Analytics, Meta Pixel, Microsoft Clarity, Hotjar, or any session-replay tool on this site, and we do not record form values, keystrokes, or page content.
Hosting. The site is served by Cloudflare Pages. Cloudflare sees the same connection data any web host sees (IP address, request headers) and applies its own privacy terms.
Owner dashboard. Aggregate reports are viewed on a private page protected by Cloudflare Access, available only to the site owner. Visitor analytics is not collected on that page.
When you send the contact form
The form asks for your name (optional), email, what you need help with, a message, and optionally good times for a call. Sending it triggers the following, and nothing else:
- Cloudflare Turnstile checks that a person, not a bot, submitted the form. Turnstile may read browser signals to do so; see Cloudflare's privacy policy.
- A per-address limit keeps one source from flooding the inbox. It stores a short-lived counter keyed to your IP address that expires within five minutes.
- Resend (resend.com) delivers the message as an email to
[email protected], which is a Google Workspace mailbox read by people at Doyel Labs, not by an automated system. - One automatic receipt. Resend also sends you a single short email confirming the message arrived and when to expect a reply. It does not repeat what you wrote, and nothing else is sent unless a person replies to you.
Nothing from the form is written to a database, sold, shared for marketing, or added to a list. We keep your message in the mailbox for as long as it takes to reply and, if we work together, for the life of that work plus our normal business-record retention. You can ask us to delete it at any time.
If you email or call us directly, the same applies.
When we build or host software for you
Websites. If you take the care plan, we host your site. Your visitors' data is governed by your own privacy notice, which we will write with you. We do not add trackers to your site. Form submissions on your site go to your inbox, not ours.
Custom software. Each build runs in accounts you own, on infrastructure you own, unless
we agree in writing otherwise. Where we operate a system on your behalf, the written scope
names exactly what we hold, for how long, and how you get it back. For payroll workspaces,
see the separate data map at /legal/payroll-data/.
Bank routing numbers, account numbers, and card numbers are never stored by software we build unless the written scope says so and names the safeguards.
Where
Our systems and the processors above are in the United States.
Your rights
Ask us what we hold about you, ask for a copy, or ask us to delete it: [email protected].
We answer within one business day and complete deletion within thirty days, except records
we are required to keep.
Changes
We update the version date above when this policy changes materially.
Contact
[email protected] · (307) 429-0389 · Doyel Labs LLC, Casper, Wyoming.