Privacy Policy
Please read this first. primelogiclab.io is a small, independently built project. This page is a plain-language, good-faith description of what the website does with data today, written from how it's actually set up rather than from a template. It has not been reviewed by a lawyer and is not a substitute for formal legal advice.
What this policy covers
This policy covers browsing primelogiclab.io and signing in with a primelogiclab.io account. Each app keeps its own data and has its own policy:
Who runs this site
primelogiclab.io is an independent developer project. There is no company, no advertising business and no data broker behind it. The site and its sign-in service run on a single server rented from DigitalOcean, in its Toronto, Canada data centre.
For anything in this policy, including deletion requests, contact info@primelogiclab.io.
Browsing without signing in
Reading the site needs no account. It sets no cookies for visitors who aren't signed in, and has no analytics, tracking or advertising of any kind.
The web server keeps standard technical access logs: IP address, time, the address requested and the response. They're used to diagnose errors and abuse.
Signing in
Who checks your identity
Signing in is handled by Auth0, a third-party identity service, where you sign in with Google or with an email address and password. primelogiclab.io never sees or stores your password. Auth0 only lets you in once your email address is verified.
Behind Auth0, primelogiclab.io runs its own sign-in service, Keycloak, on
its own server at auth.primelogiclab.io. It keeps a primelogiclab.io account record
for you, with:
- An account identifier, and the identifier Auth0 uses for you
- Your email address and whether it's verified
- Your first and last name, if Auth0 has them (for example from your Google account)
- Any roles given to your account (for example, site administrator)
Keycloak also keeps a log of sign-in events: when you signed in or out, from which IP address, and which part of the site asked. These are kept for 30 days, for security and troubleshooting, and also appear in the server's technical logs.
Your session
Once you're signed in, a small service on the same server keeps your session: the fact that you're signed in, and the sign-in tokens needed to open the apps for you. It's held in the server's memory only, never written to disk, and it ends when you sign out or after 7 days without use.
The website shows your name and email address on your account page by asking for them from your session. It doesn't keep its own copy.
Cookies
Only signing in sets cookies. They're needed for sign-in to work, and none are used for tracking or advertising.
PLL_SESSION, set by primelogiclab.io for every*.primelogiclab.ioaddress, so one sign-in covers the site and its web apps. It holds a random session number and nothing else. It can't be read by the page's scripts, is only sent over HTTPS, and lasts until you close your browser. The session it points to ends after 7 days without use, or when you sign out.- Keycloak's own sign-in cookies, on
auth.primelogiclab.ioonly. They keep you signed in to the sign-in service itself for up to 7 days without use, and 30 days at most. - Auth0's cookies, on Auth0's own domain, under Okta's privacy policy.
Who your data is shared with
- Auth0 (Okta, Inc.): handles sign-in, holds your login credentials and email address, and tells primelogiclab.io who you are. Okta privacy policy
- DigitalOcean: provides the server everything runs on.
- The primelogiclab.io apps you open: when you use an app while signed in, it receives who you are (your account identifier, email address and name) so it can show you your own data.
Your data is not sold, rented or shared for advertising or marketing. It may be disclosed if required by law.
How long data is kept
- Your primelogiclab.io account record: for as long as the account exists.
- Your session: until you sign out, or after 7 days without use.
- Sign-in event logs: 30 days.
- Server access logs: only as long as needed for diagnostics.
Deleting your account
To have your primelogiclab.io account deleted, email info@primelogiclab.io from the address on the account, with "Account deletion" in the subject line. Deletion is completed within 30 days, and you'll be emailed once it's done.
Your Auth0 login is the same one the apps use. Say in your email if you want it removed too: that also ends your access to Golf and Task Manager. Each app's own data is deleted through that app's page: Golf, Task Manager.
You can sign out at any time from your account page. That ends your session straight away.
Security
All traffic to the site is encrypted with HTTPS. Your session cookie holds no personal data, and the tokens behind it never leave the server. The sign-in service's administration pages aren't reachable from the internet.
No system is perfectly secure, and this is a small independent project rather than a company with a security team.
Children
primelogiclab.io is not directed at children under 13, and accounts are not knowingly created for them. If you believe a child has created an account, please email info@primelogiclab.io and it will be removed.
Changes to this policy
This page will be updated as the site changes. The date at the top shows when it was last revised.
Contact
Questions, deletion requests, or anything else about privacy on primelogiclab.io: info@primelogiclab.io