Cookie Policy

1. Scope

This policy explains how Open-Source-Lab uses cookies, Local Storage, and similar tracking technologies, in line with the EU ePrivacy Directive and GDPR requirements for prior transparency.

2. We Do Not Use Tracking Cookies

We do not set first-party HTTP cookies for analytics, advertising, or cross-site tracking, and we do not use any third-party analytics or ad-tech scripts.

3. Browser Local Storage (Strictly Necessary)

We use the Local Storage API — not cookies — to remember your login session, custom bots, saved API keys, and preferences. Under Art. 5(3) of the ePrivacy Directive, storage that is "strictly necessary" to provide a service you explicitly requested (e.g., staying logged in) does not require prior consent, but we disclose it here for transparency. You can clear this storage at any time via your browser settings; doing so will log you out and remove locally-saved bots/keys.

4. Third-Party Content & Embedded Resources

Our pages load fonts from Google Fonts (fonts.googleapis.com) and images from Poe's content delivery network. Loading these resources causes your browser to make a direct request to Google's/Poe's servers, which necessarily discloses your IP address and basic request metadata to that third party — independently of any cookie. This is a data transfer to a separate controller and may fall under GDPR even without a cookie being set.

Note on compliance: where legally required (e.g., for EU visitors), we are working towards self-hosting font files to avoid this third-party transfer entirely, consistent with current EU case law on Google Fonts. Until then, by continuing to browse you acknowledge that font and image requests are sent to Google/Poe as described.

5. Cookies Set by Linked/Embedded Services

If you click through to Hugging Face, Poe, Groq, OpenRouter, NVIDIA, Ollama, Discord, Bluesky, Val Town, or Ko-fi, those independent sites may set their own cookies under their own cookie policies once you land on their domain. We have no control over, and assume no responsibility for, their cookie practices.

6. How to Control Storage & Cookies

You can block or delete Local Storage and cookies through your browser settings (e.g., Chrome: Settings → Privacy & Security → Site Settings; Firefox: Settings → Privacy & Security → Cookies and Site Data). Blocking Local Storage will prevent login, saved bots, and saved API keys from working, since we have no server-side fallback.

7. Do Not Track

Because we do not track users across sites, we do not currently respond differently to "Do Not Track" browser signals — there is no cross-site tracking to disable.

8. Changes to This Policy

We will update the "Last updated" date above whenever this policy changes materially. See also our Privacy Policy for related information.