Privacy Policy
Datenschutzerklärung · Effective May 11, 2026 · Last updated May 11, 2026
Short version: lx8labs.com sets no cookies, runs no third-party analytics, and serves all fonts and images either from its own GitHub Pages host or from GDPR-compliant proxies. The only personal data we touch is the email address you voluntarily submit to the newsletter or waitlist forms.
1. Who is responsible
The operator of this website is Alexei Lemos Cavalcante Ferreira, trading as Lx8 Labs, Berlin, Germany. Full contact details are in our Impressum.
2. Data we collect and why
| What | When | Legal basis | Retention |
|---|---|---|---|
| HTTP access logs (IP, user-agent, page) |
Automatically by GitHub Pages whenever you visit the site | Art. 6 (1) (f) GDPR — legitimate interest in serving the site and detecting abuse | ~14 days (GitHub default), then aggregated |
| Email address | Only if you submit the Insights newsletter form or the Tupã IDE waitlist form | Art. 6 (1) (a) GDPR — your consent, which you can revoke at any time | Until you unsubscribe or 36 months of inactivity |
We do not collect names, addresses, phone numbers, payment data, or any cookie-based identifier.
3. Hosting
This site is hosted on GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). GitHub may collect server logs (IP, browser, time of request) for the purpose of operating the service. See GitHub Privacy Statement. Data transfer to the United States is covered by GitHub's adherence to the EU-U.S. Data Privacy Framework.
4. Fonts and assets
We use Bunny Fonts (fonts.bunny.net) — a GDPR-compliant proxy operated by BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia. Bunny Fonts does not log requesting IP addresses and stores no cookies. This replaces the legally problematic fonts.googleapis.com CDN flagged by LG München I (decision of 20 Jan 2022).
The site avatar and favicon load from avatars.githubusercontent.com (GitHub CDN, same provider as the host). The Three.js library loads from cdnjs.cloudflare.com on Algorithm Lab and Theory pages only.
5. Forms (Formspree)
The Insights newsletter form and the Tupã IDE waitlist form submit email addresses to Formspree (Formspree, Inc., 251 Little Falls Drive, Wilmington, DE 19808, USA). Formspree acts as our data processor for the limited purpose of relaying form submissions to us. See Formspree Privacy Policy. A Data Processing Agreement (DPA) is in place per Art. 28 GDPR.
While Formspree placeholder IDs are still in use, form submissions open a mailto: link in your email client — no data leaves your browser until you press Send.
6. External links
This site links to external websites (LinkedIn, GitHub, arXiv, etc.). Once you click an external link, that website's privacy policy applies. We have no control over and accept no responsibility for the content or privacy practices of external sites.
7. Your rights under GDPR
You have the right to:
- Access (Art. 15) — request a copy of any personal data we hold about you
- Rectification (Art. 16) — request correction of inaccurate data
- Erasure (Art. 17) — request deletion (the "right to be forgotten")
- Restriction of processing (Art. 18)
- Data portability (Art. 20) — receive your data in a machine-readable format
- Object (Art. 21) to processing based on legitimate interest
- Withdraw consent (Art. 7) at any time, with no effect on lawfulness of processing before withdrawal
- Complain to a supervisory authority (in Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit)
For any of these, email us via the address in the Impressum. We respond within 30 days.
8. Changes to this policy
We may update this policy when the site or its data flows change. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced in the Insights section.
See also: Impressum (legal notice).