Scorched Earth Labs
Home ASTP Research Projects Lab Notes About Connect
Legal

Privacy Policy

Scorched Earth Labs, LLC · Effective August 24, 2026 · Last updated August 19, 2026

01

Who we are

Scorched Earth Labs, LLC, a Nevada limited liability company (“Scorched Earth Labs,” “we,” “us,” or “our”), operates this website and is the data controller responsible for the personal data described in this Privacy Policy.

Contact for privacy matters: Scorched Earth Labs, LLC, 6770 S McCarran Blvd, Reno, NV 89509, USA. Email: privacy@scorched-earth-labs.com

If you are in the European Economic Area (EEA) or the United Kingdom and have a question about how we handle your personal data, you may contact us at the email address above.

02

Scope of this policy

This Privacy Policy applies to personal data we collect through this website. It does not apply to third-party platforms we link to — including our community server hosted on Discord — which are governed by their own privacy policies. See Section 8 (Third-Party Links and Platforms).

03

What we collect, why, and on what legal basis

We practice data minimization: we collect only what we need for the purpose stated, and nothing more.

Email address

When: When you sign up to “Follow the Work”

Purpose: To send you updates about our research and products

Legal basis: Consent (GDPR Art. 6(1)(a))

Email + message content

When: When you submit the “Start a Conversation” contact form

Purpose: To respond to your inquiry

Legal basis: Legitimate interests (Art. 6(1)(f)) — responding to a communication you initiated

Anonymized analytics

When: Automatically, as you browse (pages viewed, approximate region, referrer, device type — IP address anonymized)

Purpose: To understand aggregate site usage and improve the site

Legal basis: Legitimate interests (Art. 6(1)(f)) — see Section 4

We do not collect special-category data, we do not sell personal data, and we do not engage in cross-context behavioral advertising.

04

Analytics — self-hosted, privacy-preserving

We use Matomo, an analytics tool that we host on our own infrastructure. This means your analytics data is never transmitted to a third-party analytics provider and never leaves our control.

Our Matomo installation is configured to:

  • Anonymize IP addresses (the final octets are masked before storage);
  • Set no tracking cookies and use no cross-site identifiers;
  • Honor “Do Not Track” browser signals;
  • Cap data retention at thirteen (13) months, after which analytics data is deleted or fully aggregated.

Because our analytics does not store or access information on your device (no cookies, no device fingerprinting) and does not identify you, we do not display a cookie-consent banner — this configuration qualifies for the analytics exemption recognized by EU data protection authorities (including the French CNIL). Our legal basis is our legitimate interest in understanding aggregate site usage, which does not override your rights because the data is anonymized and confined to our own infrastructure.

05

Cookies

This website does not set advertising, tracking, or cross-site cookies. If we use any strictly necessary cookies (for example, to remember a preference or maintain a secure session), those are exempt from consent requirements because the site cannot function without them. We will update this section if that ever changes.

06

How we share data

We do not sell your personal data and we do not share it for cross-context behavioral advertising.

We may share personal data only:

  • With service providers who host our infrastructure or transmit our email communications, acting under contract and only as needed to provide those services;
  • Where required by law, valid legal process, or to protect our legal rights;
  • In connection with a merger, acquisition, or asset transfer, in which case we will notify you and this Policy will govern until superseded.

Where we engage a service provider, we require appropriate data protection safeguards by contract.

07

International data transfers

Scorched Earth Labs is based in the United States, and our infrastructure is located in the United States. If you access this website from outside the United States — including from the EEA or the United Kingdom — your personal data will be processed in the United States.

Where we transfer personal data of EEA or UK individuals, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable) with any service provider that processes such data on our behalf. Because our analytics is self-hosted and our data collection is minimal, the categories of data subject to transfer are limited to the email addresses and contact-form content you voluntarily provide.

08

Third-party links and platforms

Our website links to external platforms, including our community server hosted on Discord. When you click through to Discord, you leave our website and enter a platform we do not control. Any data you provide on Discord is governed by Discord’s own Privacy Policy, not this one. We are not the data controller for your activity on Discord. We encourage you to review Discord’s policy before participating.

09

Data retention

We keep personal data only as long as necessary for the purpose it was collected:

  • “Follow the Work” email addresses: until you unsubscribe or ask us to delete them;
  • Contact-form submissions: for as long as needed to handle your inquiry and a reasonable period thereafter, then deleted;
  • Analytics data: capped at thirteen (13) months, then deleted or fully aggregated.
10

Your rights

Depending on where you live, you have some or all of the following rights over your personal data:

If you are in the EEA or the UK (GDPR / UK GDPR), you have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). You also have the right to lodge a complaint with your local supervisory authority.

If you are a California resident (CCPA/CPRA), you have the right to: know what personal information we collect and how we use it; access and delete it; correct inaccurate information; and opt out of any “sale” or “sharing” of personal information (note: we do not sell or share personal information as those terms are defined). We will not discriminate against you for exercising these rights.

To exercise any right, email us at privacy@scorched-earth-labs.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.

11

Children’s privacy

This website is not directed to children. We do not knowingly collect personal data from children under 13 (consistent with the U.S. Children’s Online Privacy Protection Act) or, for EEA/UK users, from children under the applicable digital-consent age (13 to 16, depending on the member state). If you believe a child has provided us personal data, contact us and we will delete it.

12

Data security

We maintain reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure. No method of transmission or storage is completely secure, but we work to protect your information consistent with the sensitivity of the limited data we hold.

13

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above. Material changes will be communicated through the website. Your continued use of the website after an update constitutes acceptance of the revised Policy.

14

Contact us

Questions or requests regarding this Privacy Policy:

Scorched Earth Labs, LLC
6770 S McCarran Blvd
Reno, NV 89509, USA
Email: privacy@scorched-earth-labs.com