Privacy policy

Last updated November 5, 2026

What we collect

• Your email address, to sign you in and to send build updates you asked for.
• What you tell lazy lab about your product: its name, brief, and your approvals.
• Payment status from Stripe. We never see or store your card number.
• Basic logs (time, page, errors) to keep lazy lab running and secure.
• Your approximate city or region, from your connection, to tailor what lazy lab makes for you. We keep only a label like "New York", never your precise location.
• A one-way scrambled form of your IP address when you create for free, only to stop the free tier being abused. It cannot be turned back into your address.

How we use it

Only to build and run your product, to sign you in, and to keep lazy lab secure. Personal details such as names, emails, and phone numbers are removed from briefs before they reach an AI model. We do not sell your data, and we do not use it for advertising.

Who processes it

Supabase (database and sign-in), Vercel (hosting), Anthropic (AI models), Resend (email), Stripe (payments), and GitHub (your product's code). Each one handles data only to provide its service.

Where it lives

Each product lazy lab builds has its own database, separate from lazy lab's and from every other product. Its users' data stays there.

Cookies

lazy lab sets no advertising cookies and shares none of these. They live in your browser:

• sb-*: keeps you signed in.
• ll_mine_*: says you made an app, so you can change it without an account. One year.
• covet-deliver-to: the country you deliver to. One year.
• ll_recent: the ideas Surprise me already showed you, so it does not repeat them. 30 days.
• ll_seen, ll_today: count a visit, and a return visit, to a page, with no name or id. One year and one day. Not set in the places below.
• ll_arrived, ll_from, ll_post, ll_app: which link brought you today, kept on an app you make. One day. Not set in the places below.
• ll_walk: only on our own test visits, to leave them out of our counts.

Your browser also keeps a few things on your device: your hearts, wants, passes, and guide on a shop, and the last level you saw.

In the EU, EEA, UK, and Switzerland, and wherever we cannot tell your country, counting keeps nothing on your device. A visit is counted once a day by a one-way code made from your address and browser. We never store either, and the key behind the code is deleted when the next day's first visit is counted, so we cannot tell if you come back.

market.space

market.space needs no account. What you type in search is used to find things and is not tied to you. We use your country, from your connection, to show what can reach you. Tapping a tile takes you to that shop, and the shop's own privacy policy applies from there.

In the EU, EEA, UK, and Switzerland

We use your data to provide what you asked for, to keep the service secure, and to meet our legal duties, and we ask for consent where the law requires it. Our providers are mostly in the United States, so your data may be handled there under standard contractual safeguards. You can ask for a copy, a correction, deletion, or a limit on how we use your data, and you can object or take your data with you. Write to support@lazylab.com. You can also complain to your local data protection authority.

Your choices

Ask us for a copy of your data, to correct it, or to delete your account and products, and we will do it within 30 days. We keep data only as long as your account is open, or as the law requires.

Terms · Privacy · Questions: support@lazylab.com