Your information
Privacy, in plain words.
Who operates this demo
Stanza Labs, your real business/contact address. Contact: your-email@example.com.
What the portal stores
Your verified email address, account creation and sign-in times, optional update preference, access-approval status and administrative approval history, your acceptance of the current Terms of Access, and which demonstration pages your account opens. Short-lived session records keep you logged in. We use hashed rate-limit identifiers to limit abuse; this app does not store raw IP addresses in its database.
Why we use it
To verify your email, provide demo access, manage access and protect the service. Receiving product updates is optional, unchecked by default, and separate from access. You can change that preference in your account. This prototype does not automatically send marketing messages.
Cookies and service providers
The portal uses essential session, email-verification and security cookies. It includes no advertising trackers, external analytics or social embeds. STIX Two Text is loaded from Google Fonts; your browser connects to fonts.googleapis.com and fonts.gstatic.com to request its stylesheet and font resources. These requests disclose network information such as your IP address to the provider. The interface falls back to a local serif font when the service is unavailable. In the supplied production configuration, Render hosts the application and account database, and Resend delivers access codes. Those providers process the information needed to supply their services; infrastructure logs and backups are managed separately from the application database.
Retention and control
Access codes expire after 10 minutes. Login sessions expire after 12 hours or one hour of inactivity. The included cleanup command removes expired codes, sessions and rate-limit records, and account-activity records older than 90 days; it must be scheduled in production. Account data remains until deletion. You can withdraw the optional updates preference or delete your account from the account page. Live account deletion also removes its session and activity records. Any provider logs or backups are subject to the operator's separately configured retention schedule.
Questions and requests
Use the operator contact above for access, correction, deletion or other privacy requests. This notice must be adapted to the actual operating entity, providers, locations and applicable requirements before publishing.
NOTICE VERSION / 2026-10-05-cloud-v3