Privacy
This site is run by the SAFE Labs organisers, who are responsible for the personal data collected through it. It sets no cookies and runs no analytics or tracking. It is hosted on GitHub Pages, and GitHub keeps the usual server logs (including IP addresses) for security; see GitHub’s privacy statement.
The handbook generator
Your answers stay in your browser. They are saved in your browser’s local storage so you can come back to them, and are never sent to us. “Start again” deletes them, as does clearing this site’s data in your browser.
The forms
The site has three forms: the mailing list signup, the request to become a verified SAFE Lab, and the feedback box in the handbook generator. Each sends what you type into it, the page it was sent from and, for feedback, which step of the generator you were on.
Submissions pass through a relay at forms.safelabs.info, run on Cloudflare, which keeps no copy, and arrive as an email to the organisers. Mailing list signups and verification requests are then kept in a private list.
- Mailing list: your name and email address, used only to send news about SAFE Labs workshops and handbook updates. We keep them, on the basis of your consent, until you unsubscribe; to leave, reply to any mailing and ask.
- Verification requests: your name, email address and lab website. Once your lab is verified, its name and website are shown publicly on The Labs; your email address is used to contact you about the request and, once your lab is verified, is added to the mailing list so you hear about updates (you can leave it at any time). We keep these for as long as we need them to run the list of verified labs.
- Generator feedback: whatever you write, and your name or email address only if you add them. We keep it for as long as we need it to improve the generator.
If a submission cannot be delivered, or is mistaken for spam, what you typed into the form (we do not record your IP address) is kept in our Cloudflare account’s error log for up to 7 days so that we can recover it, and is then deleted automatically; only the organisers can read it.
These services handle the data for us: Cloudflare (the form relay), Google (email) and GitHub (the private list). Each may process data in the United States, under the UK Extension to the EU-US Data Privacy Framework.
Your rights
You can ask to see, correct or delete what we hold about you by contacting any of the organisers through their lab website. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office.
Last updated: 18 October 2026.