Privacy Policy
Overview
Stoudt Labs ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and the choices you have. It applies to all services and applications operated under the stoudtlabs.io domain.
Data We Collect
We collect only the minimum information necessary to provide our services. This includes:
- Phone number — collected and provided by coaches, administrators, or other authorized platform users to send you an invitation or notification via SMS.
- Email address — collected during account registration or contact form submissions.
- Usage data — anonymised analytics (page views, feature interactions) that cannot be used to identify you individually.
- Cookies — small files stored in your browser, described in detail in Cookies & Session Replay below.
We do not collect payment card numbers, government IDs, or any sensitive personal data beyond the above.
How We Use Your Data
Your phone number is used to send invitation or transactional notification SMS messages on behalf of an authorized user of our platform (e.g., a coach inviting you to join a team). Messages are sent only when an authorized platform user triggers a specific invitation or notification event. We never send unsolicited promotional or marketing messages to your phone.
Your email address is used to:
- Create and identify your account.
- Send transactional messages (password resets, security alerts).
- Respond to support requests you initiate.
- Send our build-log newsletter, if you subscribe using the signup form on our site. You can unsubscribe at any time using the link included in every newsletter email.
Cookies & Session Replay
We use a cookie consent banner to ask for your permission before setting any non-essential cookies. Cookies fall into four categories:
- Necessary — required for the site to function (e.g., remembering your cookie preferences). Always on and cannot be disabled.
- Analytics — powers PostHog, which we use to understand how visitors use our site (page views, feature interactions) and, with your consent, session replay — a recording of on-page interactions (clicks, scrolls, page navigation) used to diagnose bugs and improve usability. Text inputs and sensitive fields are masked by default. Off by default; only loaded after you accept.
- Marketing — would support advertising and campaign measurement. Off by default; not currently in use.
- Preferences — remembers UI choices (e.g., display settings) across visits. Off by default; not currently in use.
You can change your cookie preferences at any time by clearing your cookie consent choice and reloading the site to see the banner again.
Third-Party Sharing
We do not sell, rent, or share your personal information — including your phone number or email address — with third parties for marketing, advertising, or any commercial purpose.
We use Twilio to deliver SMS messages. Twilio receives your phone number only to deliver SMS messages on our behalf and is contractually prohibited from using it for any other purpose. You can review Twilio's privacy policy at twilio.com/legal/privacy.
We use PostHog to provide analytics and session replay, but only once you accept analytics cookies via our consent banner. You can review PostHog's privacy policy at posthog.com/privacy.
We use Resend to send our build-log newsletter to subscribers. Resend receives your email address only to deliver newsletter emails on our behalf. You can review Resend's privacy policy at resend.com/legal/privacy-policy.
SMS Opt-Out
You may opt out of SMS messages from Stoudt Labs at any time by replying STOP to any message you receive from us. After opting out, you will no longer receive SMS invitations or notifications from our platform.
To re-enable SMS messages, contact us at support@stoudtlabs.io or update your account settings in the relevant application.
Data Retention
We retain your personal data for as long as your account remains active or as needed to provide services. You may request deletion of your data at any time by contacting us. Phone numbers used for SMS delivery are retained only as long as needed to support active platform invitations and notifications.
Security
We apply industry-standard security measures including encryption in transit (TLS), encrypted storage of sensitive fields, and access controls to protect your personal data against unauthorised access or disclosure.
Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete the personal data we hold about you, or to restrict or object to its processing. To exercise any of these rights, contact us using the details below.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before taking effect. Continued use of our services after the effective date constitutes acceptance of the updated policy.