Privacy

Last updated October 12, 2026

This page covers the Sanctuary website (sanctuary.sanslabs.app, including Behind the Campfire), the Sans Labs site (sanslabs.app) and the Sanctuary beta list. The Sanctuary app has its own privacy policy, which will be published before the beta opens.

Sans Labs is the studio of Sanny Shavit, who runs these sites and is responsible for your data. You can reach him at [email protected].

The short version

If you join the beta list, we keep your email address and the date you joined. We use them to send you a welcome note now and one email when the beta opens. We don't sell your data, we don't run ads, and we don't use cookies to advertise to you or profile you. Cloudflare, which sits in front of our sites, may process limited security data and count visits in aggregate.

What we collect

When you join the beta list: your email address, the date and time you joined, the version of this page that was current, and whether your welcome email was sent. We don't ask for your name, and we don't store your IP address, device or browser details with your sign-up.

When you visit our sites: our hosting provider, Cloudflare, sees your IP address and basic request details, such as the page you asked for and your browser type, so it can deliver the page and keep it secure. We use Cloudflare Web Analytics to see simple, aggregate numbers such as how many people visited.

When you email [email protected]: we receive your message and your address, and keep the conversation so we can reply.

Why we use it

Because you chose to sign up, we rely on your consent for the beta list. You can withdraw it at any time.

Who handles your data for us

The typefaces on our pages are served from our own sites, not from a font service. Where data moves from Europe or the UK to the United States, these providers rely on standard contractual clauses and the EU-U.S. Data Privacy Framework. We don't share your email address with anyone else.

Cookies and tracking

Sans Labs doesn't set cookies of its own and doesn't use cookies for advertising or profiling. Cloudflare's bot protection sets one security cookie, cf_clearance, which helps tell people from automated traffic and lasts up to a year. Cloudflare Web Analytics counts visits without advertising or cross-site tracking.

Our emails contain no tracking pixels and no tracked links, so we don't see whether you open them.

How long we keep it

We keep your sign-up until the beta has opened and we've sent the launch email. We then delete the list 30 days later, unless you've separately asked to stay on it for future news. Resend deletes its record of an email 30 days after sending. If you ask us to remove you sooner, we will.

Your choices

Email [email protected] to unsubscribe and have your address deleted, to ask what we hold about you, or to correct or delete it. If you're in the EU, the UK or another place with a data protection authority, you also have the right to complain to it.

Children

The Sanctuary beta isn't aimed at children.

Changes

If we change this page in a way that matters, we'll update the date above and, if you're on the beta list, say so in our next email.