Privacy.

This notice covers www.journeylab.org. It explains what we collect, why, who helps us handle it and what you can ask us to do with it.

Who we are

Journey Lab is a digital studio based in New York. We are responsible for the personal data described here. Our legal name is Journey Lab LLC. Our postal address is available on request. For anything about your data, write to hi@journeylab.org.

What we collect, and why

When you request a call

The request form collects your name and email, and, if you add them, your company or website and a note. It also records the two answers you pick (where your business is now and where you want it to go) and the page you sent it from. We use these to reply, arrange a call and plan the work with you. The legal basis is the steps you ask us to take before a possible agreement, and our legitimate interest in answering inquiries.

After you send a request, the next page shows our booking calendar, provided by Google Calendar. If you pick a time, Google receives the details you enter there, under Google's own privacy policy.

When you join Air Mail

Air Mail is our monthly email. We ask for your first name and email, and note where on the site you signed up. You are added only after you click the confirmation link we email you; the link expires after seven days. The legal basis is your consent. You can leave at any time from any email we send, or by writing to us.

When you run a Turbulence check

The check asks for a web address, your first name and your email. We send the web address, and nothing else about you, to Google's PageSpeed Insights service to get the scores. We keep each reading for a day so a repeat check is quick. We add your name and email to our email system to send you the report, which includes an invitation to Air Mail. You join Air Mail only if you accept that invitation. The legal basis is sending you the report you asked for.

When you visit

Our hosting provider processes your IP address and basic request details to deliver the site, keep it secure and limit repeated form submissions. Short-lived technical logs help us find faults. The legal basis is our legitimate interest in running a secure website.

Cookies, analytics and local storage

With your consent, we use Google Analytics 4 to see how people use this site: the pages they view, roughly where they are and what device they use, and which steps of the request form they reach. When a request is sent, it records the two answers you picked, never your name, email or note. It sets first-party cookies (such as _ga) that last up to two years. Google signals and ad personalization are switched off. If you decline, the analytics script never loads.

We don't use advertising cookies, and we don't sell or share your data for advertising.

Some settings are kept in your own browser and are never sent to us: your cookie choice, the cabin lighting, the passport stamps you collect on case studies, whether the departure board's sound is on, and a half-finished request so it survives a refresh. The request draft is cleared when you close the tab.

You can change your choice at any time: Cookie settings, also at the foot of every page.

Who helps us

We use a small number of service providers, each handling data only to provide their service to us:

• Cloudflare hosts this site and runs its forms.
• Resend stores Air Mail and Turbulence check contacts and sends those emails.
• Vercel hosts the Journey Lab system that receives call requests, and Supabase stores them.
• Google provides Google Analytics (only with your consent), PageSpeed Insights (the web address you check) and the booking calendar.

We don't sell personal data, and we don't share it with anyone else unless the law requires it.

International transfers

We are based in the United States, and our providers may process data in the United States and other countries. Where data from the UK, the EU or Switzerland is transferred, we rely on our providers' recognized safeguards, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long we keep it

We keep call requests, Air Mail contacts and Turbulence check contacts for up to seven years, or less if you ask us to delete them. Google Analytics data is kept for the period set in Google Analytics, at most 14 months. Turbulence readings are kept for a day. When you leave Air Mail, we stop emailing you.

Your rights

Depending on where you live, you can ask to see, correct or delete the data we hold about you, to receive a copy, to restrict or object to how we use it, and to withdraw consent at any time. Withdrawing consent doesn't affect what was done before. Write to hi@journeylab.org and we will answer within the time the law sets. If you are in the UK or the EU, you can also complain to your data protection authority.

Children

This site is for businesses. It isn't meant for children, and we don't knowingly collect their data.

Changes

If we change this notice, we will update it here and change the date at the top.