Introduction
LyeLab is a soap recipe calculator. This policy explains what data we collect, why, and your rights regarding that data.
Data We Collect
When you create an account, we store:
- Email address — used for login
- Name — displayed in the app
- Password — stored as a bcrypt hash, never in plain text
- Recipes — your saved soap recipes
- Sessions — a session ID for authentication
Why We Process Your Data
We process your data to provide the service you signed up for (GDPR Article 6(1)(b) — contract performance). We do not use your data for advertising, profiling, or any purpose beyond operating LyeLab.
Cookies & Local Storage
We use only essential cookies and local storage:
session_id — HTTP-only authentication cookie (30 days)NEXT_LOCALE — language preference cookie (1 year)theme — local storage for light/dark theme preferencecookie-notice-dismissed — local storage to remember banner dismissal
We do not use any tracking, analytics, or advertising cookies.
Third-Party Services
LyeLab does not use any third-party services. All fonts are self-hosted and no external requests are made from your browser.
Data Retention
Your data is kept until you delete your account. Sessions automatically expire after 30 days. When you delete your account, all data (profile, recipes, sessions) is permanently removed.
Your Rights
Under GDPR, you have the right to:
- Access — view your personal data
- Rectification — correct inaccurate data
- Erasure — delete your account and all data
- Portability — export your data in JSON format
- Objection — object to data processing
- Complaint — file a complaint with your local data protection authority
You can export your data or delete your account from the Account Settings page.
Data Security
We protect your data with:
- Passwords hashed with bcrypt
- HTTP-only, secure session cookies
- Rate limiting on authentication endpoints
- Security headers (HTTPS in production)
Contact
For privacy-related questions, contact us at: privacy@lyelab.app
Changes to This Policy
We will update this page if our data practices change. The "Last updated" date at the top reflects the most recent revision.