Privacy Policy

1. Who We Are

Open-Source-Lab ("we", "us", "the Lab") operates this website as a catalogue and testing surface for open-source AI models. For the purposes of applicable data protection law (including the EU General Data Protection Regulation "GDPR" and the California Consumer Privacy Act "CCPA/CPRA"), Open-Source-Lab acts as a data controller only to the limited extent described below, since the majority of your data never reaches our servers.

2. What Data We Process

a) Data stored only in your browser (never transmitted to us)

Account username/password, saved API keys (Poe/Groq/OpenRouter/NVIDIA), custom bot configurations, community comments and votes, and uploaded files. This data lives in your browser's Local Storage and is never sent to an Open-Source-Lab server, because we do not operate a central backend.

b) Data transmitted to third parties at your direction

When you chat with a hosted model or load an embedded resource, your input is sent directly from your browser to that third party (see Section 4). We do not intercept, log, or store the content of these exchanges.

3. Legal Basis for Processing (GDPR Art. 6)

Where any processing occurs, we rely on: (i) performance of a contract — providing the account/bot features you request; (ii) legitimate interest — keeping the site secure and functional; and (iii) consent — for any optional third-party embeds or non-essential storage, which you can withdraw at any time by clearing your browser storage.

4. Third-Party Services

This site links to and embeds content from independent third-party controllers, including Hugging Face, Poe (Quora Inc.), Groq Inc., OpenRouter, NVIDIA, Ollama, Google Fonts, and image content served from Poe's CDN. When you interact with these services — e.g., sending a chat message with your saved API key — your data is governed by that provider's own privacy policy, not ours. We recommend reviewing their respective privacy policies before use. We do not control, and are not responsible for, how these third parties process your data.

5. International Data Transfers

Because chat and font/image requests are sent directly from your browser to third-party servers (which may be located outside your country, including the United States), those transfers are governed by the receiving provider's own safeguards (e.g., Standard Contractual Clauses). We do not ourselves transfer your data internationally, as we do not store it.

6. Data Retention

Local Storage data persists until you clear it, uninstall your browser profile, or use the deletion tools provided in Settings. Deleted bots are retained in a recoverable "Trash" state for 30 days before permanent removal. We retain nothing server-side.

7. Your Rights

Subject to applicable law, you have the right to: access the data we hold about you; rectify inaccurate data; erase your data ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent at any time.

Because your account and bot data are stored locally, you can exercise most of these rights yourself: use Settings to delete your account/bots, or clear your browser's site data. California residents additionally have rights to know, delete, correct, and opt out of the "sale/sharing" of personal information under CCPA/CPRA — we note that we do not sell or share personal information, as none passes through our servers. EU/UK residents may also lodge a complaint with their local supervisory authority.

8. Children's Privacy

This service is not directed at children under 16 (or the applicable minimum age in your jurisdiction) and we do not knowingly collect data from them.

9. Security

Because credentials are stored in your browser rather than on a central server, they are only as secure as your own device. We recommend using a unique password, keeping your browser updated, and never sharing your saved API keys. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this policy periodically. Material changes will be reflected by updating the "Last updated" date above. Continued use of the site after changes constitutes acceptance of the revised policy.

11. Contact

Questions or rights requests can be sent via Discord or mail to info@open-source-lab.com.