Privacy Policy
Last updated: 2026-05-14
Neurons Lab is part of the Neurons platform (neurons.work). This page explains what information Lab collects, how it is stored, and the choices you have. The summary first; details below.
Summary
- We collect the minimum data needed to give you an account and let you submit your capstone.
- We do not sell your data and we do not run third-party advertising.
What we collect
- Account information: the email address and (optional) display name you provide at signup. Auth is handled by Supabase. If you sign up with email and password, Supabase stores a hashed password; if you sign in with Google, Google handles authentication and we never see a password. In both cases Supabase stores a session token to keep you signed in.
- Capstone submissions: when you submit the AI-Assisted Frontend Development capstone, we store your reflection text, your path choice (Path A or Path B), an email and display-name snapshot taken from your account at submission time, and any optional artifact links you choose to add (deployed project URL, code repository URL, prompt-log URL). We also record whether you opted into having your submission appear in a curated showcase.
- Local drafts: while you are writing your capstone, your in-progress draft is saved to your browser's local storage so closing the tab does not lose your work. Local drafts never leave your device until you click Submit.
- Payment records: paid checkout is handled by Lemon Squeezy as merchant of record. Lemon Squeezy records the transaction and shares an order reference with us. We never see or store your card details.
- Analytics: if we add analytics, we will record only anonymous page-view and event data (such as catalog views, lesson starts, capstone submissions). Anything we collect will be aggregated and will not be tied to your identity.
- Security and abuse-review logs: when you access paid course content or interact with the entitlement / progress endpoints, we record an audit row with your account id, the course slug, the URL path you hit, an event type (lesson view, live-code source view, capstone save, lesson-completion mark, or entitlement check), the build version of the site you were using, and one-way hashes of your IP address and browser user-agent. We never store your raw IP address or raw user-agent. The hashes use a per-deployment salt so we can detect patterns like "the same account is being used from many distinct devices" without being able to look up "what IP is this account on." These logs are used for credential-sharing detection, scraping detection, chargeback-dispute evidence, and forensics if a release breaks something. They are not used for advertising, behavioural profiling, or anything outside abuse review.
- Theme preference: a cookie saves your light/dark theme choice across sessions.
What we do not collect
- We do not run advertising trackers.
- We do not sell or rent your data to third parties.
- We do not collect health, financial, biometric, or other special-category data.
Where your data is stored
Account and submission data live in Supabase (Postgres) on infrastructure operated by Supabase Inc. The Lab site is hosted on Cloudflare Pages. Lemon Squeezy processes payments. Each of these providers has its own privacy policy describing how they handle data on our behalf.
Children
Lab is not directed to children under 13 and we do not knowingly collect personal information from children.
Changes
If this policy changes materially, we will post the updated date at the top of this page. Continued use of Lab after a change indicates acceptance of the new policy.
Contact
Privacy questions go to support@neurons.work.