Privacy, in plain language

mattielabs.ai is a static website: there is no user database, no account system, no payment processing, and no backend collecting personal information behind the scenes. Every page is pre-built and served as-is. That's a deliberate design choice — the less infrastructure that touches your data, the less there is to worry about. The one deliberately boring exception: an anonymous usage counter we run ourselves, explained in section 05.

The interactive features — learning progress, saved prompts, tool results, and intake drafts — work without an account by storing their state in your browser's local storage. This data stays on your device and is never transmitted to Mattie Labs or anyone else. Specifically:

• Lesson progress — So finished lessons stay finished and the next one unlocks.
• Saved prompts — So your bookmarked prompts are there next visit.
• Recently viewed prompts — The short list of prompts you opened last (capped at six).
• Skill Check result — So your last quiz result is still there when you come back.
• Prompt Builder draft — So a half-written prompt survives an accidental tab close.
• Project Intake draft — So your intake answers aren't lost mid-way. Cleared when you prepare your brief, or anytime with “Clear draft.”

You're in control of all of it: clearing your browser's site data removes everything, and the features themselves include reset and clear controls. The flip side of device-local storage is honest too — we can't back it up or restore it for you, and it doesn't follow you across devices.

Two things on this site are designed to be sent to us: the general inquiry form and, if you choose, the project brief the Project Intake Lab prepares. When you send them, they go only to Mattie Labs, are used only to reply to you and prepare for a possible engagement, and are never added to marketing lists or shared with anyone else. The intake's copy and download buttons save your brief to your device — exporting sends nothing anywhere.

The optional email signup stores exactly one thing — your address — as a private list with Resend, the same delivery provider. It's used only for the practical AI tips you asked for, with an unsubscribe in every send — no spam, no list sharing, and you can ask to be removed at any time.

This site's domain and delivery run through Cloudflare, which provides DNS, content delivery, and security protection (like filtering malicious traffic). Like virtually every service of its kind, Cloudflare processes basic technical data — your IP address, browser type, and request logs — to deliver pages quickly and keep the site safe. That processing is standard web plumbing: Mattie Labs doesn't use it to identify, profile, or track you.

Cloudflare's own practices are covered by the Cloudflare Privacy Policy (opens in a new tab). If additional Cloudflare services are ever enabled (for example bot protection on forms), they'll follow the same rule as everything else here: privacy-respecting options first, and this page updated to say so. That's how the analytics system in section 05 runs today — on Cloudflare Workers, under the same privacy-first rule.

This site sets no cookies. There are no advertising or social-media trackers, and nothing here follows you around the web. (Local storage, described above, isn't a cookie — it never travels with your requests.)

What runs instead is a small analytics system Mattie Labs built and hosts itself — first-party, cookieless, and anonymous. It counts pageviews and which features get used: a lesson finished, a prompt copied, a tool tried. It never records who you are, what you type, names, emails, message contents, or search text.

Here's how counting works without identifying anyone: our collection endpoint derives a short anonymous code from your IP address and browser type using a secret that changes every 24 hours. The raw IP address and browser details are never stored, the code can't be reversed, and because the secret rotates daily, today's code can't be connected to tomorrow's. No profile of you can exist.

Detailed event data is kept for up to 90 days, then only anonymous daily totals remain. If your browser sends the Do Not Track or Global Privacy Control signal, this site respects it and records nothing at all. Analytics data is never sold, shared, or used for advertising.

This site never sends anything you type to an AI service — there are no AI API calls anywhere. The prompts, exercises, and tools are copy-into-your-own-tool by design: when you paste a prompt into ChatGPT, Claude, or any other assistant, that conversation happens under thattool's privacy policy, not this one.

That boundary matters, and teaching it is part of what Mattie Labs does — the AI Safety & Privacy learning path covers what's safe to share with AI tools and what isn't.

• Use the entire site — lessons, prompts, tools — without providing any personal information at all.
• Clear everything stored on your device via your browser's site-data settings or the in-page reset/clear controls.
• Turn on Do Not Track or Global Privacy Control in your browser, and the anonymous usage counter skips you entirely.
• Ask what we hold about you, or ask for it to be deleted — that's any message or brief you've sent us by email, and nothing else.

Any change is posted here with a new “last updated” date, and meaningful changes — like naming the form provider or adding analytics — get called out in plain language rather than buried in a rewrite.

Privacy questions are welcome — including “wait, what does that mean?” ones. Reach out through the general inquiry form, or email mattielabs@gmail.com directly.