Privacy

Accounts and experiments

We store your email for sign-in and password reset. Passwords are stored as Django password hashes.

Saved projects contain your title, component configuration, layout, and connections. They are private to your account in the normal project interface. Authorized administrators can inspect account and project records for support.

Cookies and local storage

Session and security cookies support sign-in and protect requests. Browser storage keeps desk preferences, notebook drawings, and a temporary guest setup when you sign in.

Notebook drawings stay on that browser. Deleting your account does not erase that browser’s local storage.

Visits and laboratory activity

We use first-party activity counts to understand how the lab is used. A random browser cookie, lasting up to 30 days, groups visits from the same browser. We record the page category, time, whether you are signed in, and selected actions such as entering the lab, picking up a component, connecting a wire, adjusting a component, saving, exporting, or resetting an experiment.

These records contain no email address, IP address, device fingerprint, typed text, passwords, notebook drawings, or project contents. Authorized staff can view counts and recent activity. Detailed records and inactive browser identifiers are removed after 30 days; anonymous daily totals remain. Do Not Track and Global Privacy Control disable this collection. Counts describe browsers, not verified individuals.

Feedback

When you submit a problem or suggestion, we store its category, summary, details, submission time, and any email address you choose to provide. Authorized staff can review these private reports, add internal notes, and track their status. Feedback is not published or used for advertising. You do not need an account, and submissions are not linked to your account automatically. Please avoid including passwords or other sensitive information. Feedback may also be included in database backups.

Logs and outside services

Production application logs record bounded event names, status codes, and exception locations. They exclude passwords, reset tokens, and complete circuit payloads. Your hosting operator may keep separate network logs under its own retention policy.

No external analytics provider is used. Fonts and application assets are served with the lab. A configured email provider handles password-reset delivery.

Export and deletion

You can export a project as JSON. Account deletion requires your password and confirmation, removes your account identity and owned projects, and ends account access.

Hourly database backups are retained for 30 days and can contain earlier copies of account records and activity details. Anonymous activity totals are not linked to an account.