– PRIVACY POLICY · TSG LABS
Privacy Policy
Last updated: 2026-05-09
The legal data controller
The website at tsglabs.net is owned and operated by Hans Study, an individual based in Ontario, Canada, doing business under the trade names TSG and TSG Labs (together, "TSG Labs", "we", "us", or "our"). For purposes of Canadian privacy law (PIPEDA) and applicable provincial legislation, the data controller for personal information collected through this Site is Hans Study personally. "TSG" and "TSG Labs" are trade names, not separate legal entities.
This policy describes what personal information is collected through this Site, how it is used, and how it is retained.
What this site collects
- Contact form submissions at
/contact/: name, email address, organization (optional), and the message you choose to send. Submissions are validated by Cloudflare Turnstile (a CAPTCHA alternative) before being delivered. - Audit and notify submissions: the tools at
/tools/switch-config-audit/,/tools/studycrypto/, and/tools/workstation-config/may collect your name and email if you choose to receive a copy of an audit report or to be notified about a beta release. - Configuration text submitted to the audit tool: the configuration you paste or upload is processed at request time on Cloudflare Pages Functions to produce findings. The configuration text is not retained beyond the request.
- Standard server logs: Cloudflare records the requesting IP address, user agent, and the requested resource for security and abuse prevention. These logs are retained per Cloudflare's standard policy.
- Analytics: Google Tag Manager (container ID GTM-MV87B848) loads a deferred analytics script. This may include Google Analytics 4 page views, referrer, and standard browser metadata.
How submissions are handled
Form submissions are delivered by email through Resend (resend.com), an email delivery service. The destination address is monitored by Hans Study only. Submissions are not added to a marketing list. There is no newsletter and no automated follow-up.
Audit results delivered by email contain a summary of the findings and the email address you provided. The original configuration text is not included in the email.
Lawful basis
The lawful basis for processing personal information collected on this Site is your consent (express, in the case of forms you choose to submit) and our legitimate interest in operating, securing, and improving the Site.
Cookies
This Site uses cookies set by Google Tag Manager and Cloudflare Turnstile. No first-party cookies are set by TSG Labs for tracking or personalization.
Sub-processors and service providers
- Cloudflare (hosting, CDN, DDoS protection, Pages Functions, Turnstile)
- Resend (transactional email delivery for contact and audit responses)
- Google (Tag Manager and, where loaded, Google Analytics 4)
Each of those services has its own privacy policy. Collectively, they may process the information described above on behalf of Hans Study, operating as TSG Labs, in order to make this Site function.
What this site does not do
- No selling, sharing, or trading of personal information.
- No advertising networks, no retargeting pixels, no third-party trackers beyond Google Tag Manager.
- No background scripts that read browser history, clipboard content, or device fingerprints.
Retention
Form submissions delivered by email are retained in the inbox of Hans Study for as long as is necessary to respond to the inquiry and maintain a record of the engagement. Audit configuration text is processed in memory only and is not retained beyond the request. Analytics data follows Google's standard retention policy. Server log data follows Cloudflare's standard retention policy.
Your rights
If you have submitted information through this Site and would like a copy of what is held, or for it to be corrected or deleted, send a request to [email protected]. Requests are processed within a reasonable timeframe, typically within seven days. The contact of record for privacy matters is Hans Study, Ontario, Canada.
Cross-border data transfer
The service providers listed above may process information in the United States or other countries outside Canada. By submitting information through this Site, you acknowledge that the information may be processed in those jurisdictions and may be subject to lawful access by their authorities.
Changes
This Privacy Policy may be updated. The "Last updated" date at the top of this page reflects the most recent revision.
Contact
Questions about this Privacy Policy can be sent to [email protected].