Privacy

Who is responsible

WarpLab is run by Daniel Cantón, who decides what is kept and why: the controller under the GDPR and the person responsible for the database under Ley 25.326. Write to hello@warplab.app about anything on this page.

What WarpLab keeps

Signed out: one cookie, warplab-locale, with your language. Your browser also remembers whether you finished the VR and AR controls tutorial; that never leaves the device.

Signed in, and only then:

• Your email address, to send the sign-in link and to know it is you, and the sign-in cookies that keep you signed in.
• Your language and time zone, so pages and dates read right.
• Your place in each module you work in: the settings on screen, the step you reached and when you completed it, so you can resume.
• The topics you follow, whether each sends an instant alert, and your digest choice (off, daily or weekly).
• Your partner memberships: whose members-only modules you can open, and whether your email domain or an invite gave you access. An invite stores the address it was sent to.
• Nothing else: no name, no payment details, no location, no advertising profile.

Analytics

WarpLab counts page views with Vercel Analytics. It sets no cookie and stores nothing on your device. It records the page, the site you came from, your country, browser, operating system and device type. It tells visits apart by a hash of the request that is thrown away after 24 hours, so no one can follow a visitor from one day to the next or across sites.

There are no ads and no other trackers.

Who handles it

Each of these handles the data only to provide its service to WarpLab, under its data processing terms. WarpLab sells nothing and shares nothing with anyone else.

• Supabase: the database and the sign-in service. WarpLab's data is stored in the European Union.
• Vercel: hosts the site and runs the analytics. Its servers keep request logs (address, page, time) for a short time to run and protect the site. Vercel is in the United States; transfers rely on its data processing agreement and the European Commission's standard contractual clauses.
• Resend: will send topic alerts and digests once they start. Today WarpLab emails nothing but the sign-in link, which Supabase sends.
• Google: only if you choose Continue with Google, to confirm your email address.

Legal basis

GDPR: the account, your settings, progress, follows and memberships are the service you ask for when you sign in (contract, Art. 6(1)(b)). Alert emails, once they start, go only for topics you chose (consent, Art. 6(1)(a)); switch them off on the Alerts page at any time. Cookieless analytics and short-lived request logs serve WarpLab's legitimate interest in a working, secure site (Art. 6(1)(f)).

Argentina, Ley 25.326: by signing in you give your free, express and informed consent, for the purposes on this page only (Art. 5 and 6). Giving the data is optional: without it you lose only the account, never a public page.

Your rights

You can see what WarpLab keeps about you, correct it, take a copy, limit or object to its use, withdraw your consent and have it deleted. Most of it you do yourself: language and time zone on the account page, follows and alerts on the Alerts page, deletion at the bottom of the account page. For anything else write to hello@warplab.app. You get an answer within a month, and within the times Ley 25.326 sets: 10 days for access, 5 working days for a correction or deletion.

You can complain to a data protection authority: in the European Union, the one where you live or work; in Argentina, the Agencia de Acceso a la Información Pública (AAIP).

As Argentine law requires: you may access your personal data free of charge at intervals of no less than six months, unless you show a legitimate interest (Ley 25.326, Art. 14(3)). The AAIP, the supervisory body for Ley 25.326, hears complaints from anyone whose rights under the data protection rules have been breached.

Keeping and deleting

WarpLab keeps your data while your account exists. Delete the account from its page and your settings, progress, follows, alert choices and partner memberships go at once.

The sign-in service is shared with Cuenta y Crea, another site by the same person, on the same Supabase project. If WarpLab created your sign-in, deleting the account deletes it too. If your email address already had one there, WarpLab deletes its own data and keeps that sign-in; the account page says which happened.

Children

Every public page works without an account, so a class can use WarpLab without giving any data. A child under 16 should only sign in with a parent's or guardian's consent.

Changes

The date at the top says when this page last changed. A change to what WarpLab keeps or who handles it is published here before it applies.

Contact

Questions, requests or complaints: hello@warplab.app.