Privacy

Privacy Policy

Last updated: September 18, 2026

Contact form

When you use the contact form, DMA Labs receives the name, email address, websites or data sources, and message you submit. We use this information only to review your inquiry, respond to you, and discuss a possible project.

Legal basis

We process inquiry data to take steps at your request before entering into a contract and, where applicable, for our legitimate interest in responding to business inquiries and preventing abuse of the form.

Retention

We retain inquiry correspondence only for as long as it is needed to handle the request, maintain an appropriate business record, or meet a legal obligation. Technical rate-limit records contain a one-way identifier and submission timestamps; only attempts within the previous one-hour window are used to evaluate limits. We do not store the raw IP address in the contact message log.

Sharing

We do not sell contact form data. Information may be processed by the infrastructure and email providers required to operate the website and deliver the message.

Optional website analytics

On our production website, we use self-hosted Umami analytics only with your consent to understand aggregate visits and whether people download our public sample, click an email link, or successfully submit an inquiry. Accepting or declining is optional and does not affect access to the website or contact form. Preview websites are not tracked.

Before you accept, we do not load the analytics tracker or send analytics requests. We remember only your analytics choice and its expiry in your browser's local storage for up to 180 days. We do not set advertising or analytics cookies. Use Analytics settings in the footer and choose Decline analytics to withdraw consent and stop future collection, including on the current page. Withdrawal does not erase previously collected records. Clearing browser storage removes your saved choice. We also respect Do Not Track and Global Privacy Control signals.

Analytics records contain the homepage or privacy-page path, an external referrer's scheme and host (not its path or query), and only pre-approved, general campaign labels. Event records use only the names sample_download_click, email_click, and contact_form_success. We do not send form contents, email addresses, names, arbitrary URL parameters, page fragments, screen dimensions, or custom visitor identities to analytics.

The analytics service is operated by DMA Labs on our AWS infrastructure in the United States, not a third-party advertising platform. The server necessarily receives an IP address and browser user-agent with a request. Umami uses these transiently with a salt that rotates daily to derive an approximate daily visitor identifier; the raw IP address is not stored in the analytics database. This is not a promise of zero identifiers or complete anonymity. Browser/device and approximate location categories may be derived server-side. We do not use analytics to identify visitors or track them across unrelated websites.

Analytics records in the live database are retained for up to 90 days. Deleted records may remain in restricted-access backups for up to another 30 days; retention is reapplied before collection resumes after a restore. Separate web-server access logs can contain raw IP addresses and request URLs for security and operations; their routine rotation retains approximately 15 days. These operational logs are separate from consent-based analytics and are generated when the website is requested.

Your rights

Depending on applicable law, you may request access to, correction of, or deletion of your personal data, request restriction of processing, or object to processing. You may also lodge a complaint with the relevant data protection authority.

Contact

Questions about contact form data can be sent to contact@dmalabs.net.