diff --git a/privacy/index.html b/privacy/index.html index b796153..ed95989 100644 --- a/privacy/index.html +++ b/privacy/index.html @@ -52,10 +52,11 @@

What this site does with your data.

Video
The RISE demo page embeds a video from YouTube using its privacy-enhanced domain (youtube-nocookie.com). Nothing loads from YouTube until you press play on that video. The site’s own demo video is served from syberlabs.io.
Email
Contact links open your email app. SyberLabs receives only what you choose to send and uses it to reply to you.
Private app backups
Signed-in people can explicitly save a private backup from Omni, RISE or Sketch to their account. We store the selected document or canvas content, its name, app and save time in Cloudflare D1, linked to the account. There is no automatic upload: existing local work stays in the browser until you choose Save to account. The apps can retrieve only their own app’s backups for that signed-in account. Backups stay until you ask us to remove them; use the contact below to request removal. Each account can store up to 50 backups, with a 1 MB limit each and 10 MB total. These backups do not carry model API credentials or grant application permissions.
-
Staff sign-in
People SyberLabs adds can sign in with GitHub, and can add Google. We receive the account’s numeric id and username from GitHub and keep them, with the roles we grant and sign-in times, in a Cloudflare database. For Google, we receive the account’s id and email address. Sessions and admin actions are recorded with a shortened IP address and the browser name. We never keep Google or GitHub access tokens. Starting a sign-in sets a 10-minute cookie on syberlabs.io; signing in sets a session cookie that expires after 13 hours, and the session itself ends after 12. Nothing is set for visitors who don’t start a sign-in, nothing is recorded about people who are refused, and the session cookie stays on syberlabs.io. Omni, RISE and Sketch can check that session through a restricted account service. Records are kept for about 400 days. Staff accounts are turned off, not deleted, when access ends; ask us and we will remove your details. Processors: GitHub, Google, Cloudflare.
+
Staff sign-in
People SyberLabs adds can sign in with GitHub, and can add Google. We receive the account’s numeric id and username from GitHub and keep them, with the roles we grant and sign-in times, in a Cloudflare database. For Google, we receive the account’s id and email address. Sessions and admin actions are recorded with a shortened IP address and the browser name. We never keep Google or GitHub access tokens. Starting a sign-in sets a 10-minute cookie on syberlabs.io; signing in sets a session cookie that expires after 13 hours, and the session itself ends after 12. Nothing is set for visitors who don’t start a sign-in, nothing is recorded about people who are refused, and the session cookie stays on syberlabs.io. Omni, RISE and Sketch can check that session through a restricted account service. Records are kept for about 400 days. The sign-in and account service counts its requests and errors by route and app, without identifying anyone, and keeps those counts for three months. Staff accounts are turned off, not deleted, when access ends; ask us and we will remove your details. Processors: GitHub, Google, Cloudflare.
+
Omni preview
The server behind the Omni preview at omni.syberlabs.io keeps no request logs: no URLs, request details or IP addresses. Its only logs are event lines from a fixed list, such as which public data source failed and how, kept for up to 7 days to diagnose faults. They hold no IP addresses, canvas content, questions or identifiers.
Other sites
Links to GitHub, LinkedIn, TypeSafe AI and other sites follow those sites’ own policies. The RISE reading app has its own RISE privacy policy.
-

Last updated 8 October 2026. Questions: hello.mateorobles@gmail.com

+

Last updated 4 November 2026. Questions: hello.mateorobles@gmail.com