Skip to content
OCTANE LABS

Privacy Policy

Last updated: September 4, 2026.

1. Introduction & scope

This Privacy Policy explains how Octane Labs, LLC ("Octane Labs," "we," "us") handles information collected through octanelabs.dev (the "Site"). It covers visitors to the Site and people who submit our contact form. It does not cover personal data we process on behalf of a client under a signed engagement — that is governed separately by the applicable services agreement and data processing terms.

2. Who we are

Octane Labs, LLC is a custom software development and Ruby on Rails consultancy based in London, Kentucky, USA. For privacy questions or requests, contact us at [email protected] [PLACEHOLDER — confirm this inbox is live and monitored before publishing].

3. What data we collect

  • Contact form: the name, email address, and message you submit, along with first-touch attribution data (referring URL and landing page) that we store alongside your submission as a "Lead."
  • Analytics: Google Analytics 4 (GA4), which is scaffolded in our codebase but not yet live at the time of this draft. Once enabled, GA4 sets cookies and processes identifiers to measure how visitors use the Site.
  • Server logs: standard web server logs (IP address, user agent, request timestamps) generated by our hosting provider in the ordinary course of serving the Site.

We do not operate a newsletter, user accounts, e-commerce checkout, or chat widget, and we do not collect data through any of those channels because they do not exist on this Site.

4. How and why we use it

We use contact form submissions to respond to your inquiry and follow up about a potential engagement. We use analytics data, once GA4 is live, to understand aggregate Site usage and improve our content. We use Cloudflare Turnstile to distinguish real visitors from automated bots submitting our contact form.

5. Third parties we work with

  • Google Analytics (GA4) — website analytics. Not yet active as of this draft.
  • Resend — delivers the transactional email notification we receive when someone submits the contact form.
  • Cloudflare Turnstile — bot and spam protection on the contact form.
  • Our hosting provider — hosts the Site and generates standard server logs. [PLACEHOLDER — name the hosting provider once our Kamal deployment is finalized.]

6. Cookies & tracking

The Site uses a first-party session cookie for security (CSRF protection) that is strictly necessary and not used for tracking. Cloudflare Turnstile sets a cookie to verify you are not a bot. If and when GA4 is enabled, it will set analytics cookies; we intend to gate that behind a cookie consent mechanism rather than run it unconditionally.

7. Data retention

We retain Lead records for as long as we are pursuing or maintaining a business relationship with you, and delete or anonymize them thereafter on a periodic basis. [PLACEHOLDER — a specific retention period will be set once finalized internally.] Analytics data, once GA4 is live, follows the retention window we configure in that product.

8. We do not sell your data

Octane Labs does not sell personal data and does not share it for cross-context behavioral advertising.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, and to object to or restrict certain processing (rights recognized under laws such as the EU/UK GDPR and the California Consumer Privacy Act). To exercise any of these rights, contact us at [email protected] and we will respond as required by applicable law.

10. Children's data

The Site is not directed to children, and we do not knowingly collect personal data from anyone under 13 (or under 16 where a higher threshold applies).

11. Security

We use reasonable technical and organizational measures, including encryption in transit and access controls, to protect the data we handle. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. International data transfers

Some of the third parties described above (including Google and Cloudflare) operate globally and may process data in the United States. Where required, we rely on the applicable transfer mechanisms those providers make available, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the most recent revision.

14. Contact us

Questions about this policy or requests regarding your data can be sent to [email protected] [PLACEHOLDER — confirm this inbox before publishing].