Website privacy notice
This notice covers pacellilabs.com, the members' club at club.pacellilabs.com, and emails sent to hello@pacellilabs.com. Each app has its own privacy policy, linked at the end.
Who is responsible
Pacelli Labs is a personal project, not a company. Juan Carlos Celis Pinto runs it and is the controller of the personal data described here. Contact: hello@pacellilabs.com.
When you visit this site
This site sets no cookies, stores nothing in your browser, runs no JavaScript and loads nothing from anyone else's servers. There are no analytics, advertising or social media tools.
The site is hosted by Cloudflare. To deliver pages and protect the site against attacks, Cloudflare processes technical data such as your IP address, your browser's user agent and the address of the page you request. We do not keep access logs of our own. Cloudflare acts as our processor under its Data Processing Addendum.
Legal basis: our legitimate interest in running a website that works and is secure (Article 6(1)(f) GDPR).
When you write to us
Email to hello@pacellilabs.com is forwarded by Cloudflare Email Routing to a mailbox hosted by Google. We receive your email address, your message and anything you attach, and use them only to answer you and deal with what you asked about. We keep the conversation for as long as it is needed for that and any follow-up. You can ask us to delete it at any time.
Legal basis: our legitimate interest in answering the people who contact us, or taking steps you ask for before using an app (Article 6(1)(f) and 6(1)(b) GDPR).
The club
The club at club.pacellilabs.com is a private members' area. When you ask to join or accept an invitation we collect your email address, the name you choose to show other members and any note you write about yourself. If someone invited you, we record who. As a member you can also add a GitHub username, and the posts and replies you write are visible to every member.
We use this data only to decide on your request, to let you sign in and to run the club. Sign-in works with a one-time code sent to your email, so no password is ever stored. The club sets one strictly necessary cookie that keeps you signed in for up to 30 days. It runs no JavaScript and no analytics. Only admins can see members' email addresses.
The data is stored in Cloudflare D1, with Cloudflare acting as our processor. Club emails (sign-in codes, invitations and decisions on requests) are sent through Resend, also as our processor, which receives the recipient's address and the message. Declined requests are erased after 30 days. From your page in the club you can download everything you have posted and delete your account at any time: your account and email address are erased immediately, and your posts stay, shown as written by a "Former member", unless you delete them first.
If you connect the club to an AI assistant such as Claude, the club stores the app's name, when you connected it and when it was last used, and the access codes it was given, kept only in scrambled form. The assistant can then use the club as you: read what you can read, open the public GitHub code shared in the club, post, edit and delete your own forum posts and, if you are an admin, write guides and insights. Posts it sends show the app's name next to yours. What it reads goes to the assistant's provider under your own agreement with them. You can disconnect an app at any time from your page in the club and its access ends at once. Connections also end when your membership does.
Admins write the guides and project insights. Every change to them, and every admin decision about members, is kept in a permanent record with the admin's name and the time, so that mistakes can be traced and undone. That record refers to members only by an internal number, which no longer leads to anyone once their account is deleted.
Legal basis: your request to join and your membership (Article 6(1)(b) GDPR), and our legitimate interest in keeping the club safe and its content reliable, for example by limiting sign-in attempts and keeping a record of changes (Article 6(1)(f) GDPR).
Transfers outside Europe
Cloudflare, Google and Resend may process this data in the United States. All three are certified under the EU-U.S. Data Privacy Framework, and their data processing terms include the European Commission's Standard Contractual Clauses.
Your rights
You can ask to access, correct or delete your personal data, restrict or object to its processing, and receive a copy of it. Write to hello@pacellilabs.com. We answer within one month and do not charge for it.
If you think your data has been mishandled, please tell us first so we can put it right. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU or EEA country where you live or work, or where the problem happened.
The apps
Changes
If this notice changes, the new version will be published on this page with a new date.