🔬 Privacy Policy

    Last updated: October 17, 2026

    Overview

    Labreador ("we", "our", "the application") is a client-side bioassay analysis platform. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding your information.

    Data We Collect

    Calculator data stays local. Plate readings, concentrations and calculator results are processed in your browser and are not uploaded. Optional AI chat and external MCP clients involve server processing. Website delivery and abuse prevention also involve technical request metadata, described below.

    • Experimental data (plate readings, concentrations, results) – processed entirely in your browser, never sent to any server
    • Preferences (theme, layout settings) – stored locally via localStorage
    • Cookie consent – your accept/decline choice stored locally
    • Lab Assistant chat (optional) – the message you type is relayed to an external AI model provider to generate a reply; nothing is stored in a Labreador database (see "Lab Assistant (AI Chat)" below)
    • Technical request metadata – IP addresses and connection metadata are processed by hosting/security infrastructure; the chat endpoint also uses IP addresses for temporary anti-abuse rate limiting.

    Data We Do NOT Collect

    • Personal identifying information through calculator inputs (do not include personal information in optional chat)
    • Account or login credentials
    • IP-based profiles or precise geolocation for advertising
    • Browsing history or tracking data
    • Your experimental results or research data

    Data Processing

    All calculator bioassay calculations (curve fitting, statistical analysis, interpolation) are performed entirely in your browser using JavaScript. Calculator inputs and results are not uploaded or stored on a Labreador server. This local-processing guarantee does not apply to information you deliberately send through AI chat or an external MCP client. You retain ownership and control of your experimental data.

    Third-Party Services

    Calculators make no external API calls with your experimental data. Optional Lab Assistant chat relays messages through Lovable Cloud and an AI gateway to an external model provider; external MCP clients have their own providers. Website hosting and security infrastructure process the requests needed to deliver the service. Labreador does not use calculator data for advertising or profiling.

    Fonts and Website Delivery

    Space Grotesk and JetBrains Mono are bundled with the application and served as website assets. The current application does not request fonts from Google Fonts. Earlier versions loaded fonts from Google, which received the visitor's IP address and request metadata when those files were requested. Hosting and security providers still process IP addresses and ordinary connection metadata to deliver the website and protect it from abuse; their infrastructure logs and retention are governed by their own policies. This is distinct from uploading experimental datasets.

    Lab Assistant (AI Chat)

    The optional Lab Assistant sends the text you submit and recent conversation context outside your browser. It does not automatically read or upload calculator datasets.

    • What is sent: only the chat message you type, plus the immediate conversation context needed to answer it.
    • How it is processed: your message is relayed through a Labreador server endpoint to an external AI model provider, which generates the reply. Labreador does not save your messages in any database and does not use them for any other purpose.
    • Third parties: the AI model provider may process or retain the message under its own privacy policy. Do not send confidential or unpublished data through the assistant — keep such data in the calculators, which run entirely in your browser.
    • IP-based abuse prevention: the endpoint reads your IP address from request headers and uses an in-memory counter to limit requests (10 per 60-second window). This counter is not written to a Labreador database. The window resets on a later request; an inactive key may remain in the running server instance until that instance is recycled. This is not a promise that hosting or gateway providers keep no request logs.

    MCP Server (AI Agent Integration)

    Labreador also offers an optional, public MCP server at https://labreador.com/mcp that AI assistants (e.g. Claude, ChatGPT or other MCP clients) can call. Together with the Lab Assistant chat above, these are the only two Labreador features where processing happens on a server instead of in your browser. The MCP server is never used by the web application itself.

    • What is sent: only the numeric values and labels the AI assistant passes to a tool (e.g. standard concentrations and signals, element concentrations, intake and body weight).
    • How it is processed: values are processed in memory solely to compute the requested result and are returned in the response.
    • What is stored: nothing. Inputs and results are not saved, logged to a database, or used for any other purpose. No account or login is required.
    • Third parties: the AI assistant you use is operated by its own provider (e.g. Anthropic, OpenAI) under that provider's privacy policy. Labreador has no control over what that provider stores.

    If you do not want any data to leave your device, use the Labreador web application directly instead of the MCP server. See also Terms of Service §14.

    Data Retention

    Calculator datasets and results remain on your device. Clear your browser's localStorage to remove preferences; exported files are saved locally. Chat messages and MCP inputs are not stored in a Labreador database. Temporary anti-abuse counters and infrastructure/provider retention are separate; we do not promise deletion of provider-controlled records by clearing browser data.

    Your Rights (GDPR)

    Under the General Data Protection Regulation (GDPR), you have the right to:

    • Access – Contact us about personal data processed through the service; calculator data remains on your device.
    • Rectification – You can modify any stored settings directly
    • Erasure – Clear local data and contact us about applicable server-side personal data; browser clearing does not erase provider records.
    • Data portability – Export your results as CSV at any time
    • Object or restrict processing – Contact us about processing based on legitimate interests; choose not to use optional AI services.

    Request delivery and abuse prevention serve our legitimate interests in operating and securing the service (GDPR Article 6(1)(f)); optional chat processing is used to provide the response you request (Article 6(1)(b), where applicable). You may also complain to your local data protection authority. External providers may process data outside the EEA under their own transfer arrangements; contact us for available information rather than assuming all processing stays within the EU.

    Children's Privacy

    Labreador is intended for scientific and research use, not directed at children under 16. Do not submit children's personal information through AI chat. Contact us if you believe such information has been submitted.

    Changes to This Policy

    We may update this policy from time to time. Changes will be reflected on this page with an updated "Last updated" date.

    Contact

    If you have questions about this privacy policy, contact us at labreador@gmail.com.