← Back to Movalab

Privacy Policy

Last updated: April 2026

1. Data controller

Movalab is an initiative of Movaterra. For any data protection queries, contact us at hello@movalab.io.

2. What data we collect

This website does not collect personal data through forms or user accounts. If you contact us via email, we process your name and email address solely to respond to your enquiry. We also collect anonymised usage data through our self-hosted analytics platform (see Section 4).

3. Third-party services

Google Fonts: This site loads fonts from Google (fonts.googleapis.com and fonts.gstatic.com). Your browser makes a request to Google's servers, which may log your IP address. Google's privacy policy: policies.google.com/privacy.

Hetzner: This site is hosted on Hetzner servers. Hetzner may process connection data (IP address, request headers) as part of server operations. Hetzner's privacy policy: hetzner.com/legal/privacy-policy.

4. Analytics (Umami)

We use Umami, a self-hosted, open-source analytics platform hosted on our own server at stats.movalab.io. This means your analytics data is not shared with any third party and never leaves our infrastructure.

Umami collects the following data only after you give consent via the cookie banner:

IP anonymisation: Your IP address is anonymised before storage. We cannot identify you personally from analytics data.

Opt-out: If you rejected cookies via the banner, we do not track your visit. You can change your preference at any time by clearing your browser's localStorage for this site, which will trigger the banner again on your next visit.

5. Cookies

This site relies on localStorage rather than standard tracking cookies for its operations:

A preference value (movalab_consent) is stored in your browser's localStorage to remember your Accept/Reject decision. This is not a cookie and cannot be read by any other website.

No third-party cookies, advertising cookies, or social media cookies are used.

6. Legal basis (GDPR)

Analytics and Google Fonts: Your consent, given via the cookie banner (Article 6(1)(a) GDPR). If you reject, Umami does not set storage or track your visit on subsequent page loads.

Email correspondence: Legitimate interest in responding to your enquiry (Article 6(1)(f) GDPR).

7. International transfers

Analytics data remains on our own server and is not transferred internationally. Google Fonts may involve transfer of IP data to servers outside the EEA, including the United States. Google participates in the EU-US Data Privacy Framework.

8. Your rights

Under GDPR, you have the right to access, rectify, erase, restrict processing, object to processing, and data portability regarding any personal data we hold. You also have the right to withdraw consent at any time and to lodge a complaint with your local supervisory authority (in the UK: the ICO at ico.org.uk).

9. Data retention

Analytics data is retained for 26 months and then automatically deleted. Email correspondence is retained for as long as necessary to complete the enquiry. The localStorage consent preference persists until you clear your browser data.

10. Changes to this policy

We may update this policy from time to time. The date at the top reflects the most recent revision.