Privacy Policy

The legal data controller

The website at hans.study is owned and operated by Hans Study, an individual based in Ontario, Canada, doing business under the trade names TSG and TSG Labs (together, "TSG Labs", "we", "us", or "our"). For purposes of Canadian privacy law (PIPEDA) and applicable provincial legislation, the data controller for personal information collected through this Site is Hans Study personally. "TSG" and "TSG Labs" are trade names, not separate legal entities.

This policy describes what personal information is collected through this Site, how it is used, and how it is retained.

What this site collects

• Contact form submissions at /contact/: name, email address, organization (optional), and the message you choose to send. Submissions are validated by Cloudflare Turnstile (a CAPTCHA alternative) before being delivered.
• Audit and notify submissions: the tools at /tools/switch-config-audit/, /tools/studycrypto/, and /tools/workstation-config/ may collect your name and email if you choose to receive a copy of an audit report or to be notified about a beta release.
• Configuration text submitted to the audit tool: the configuration you paste or upload is processed at request time on Cloudflare Pages Functions to produce findings. The configuration text is not retained beyond the request.
• Standard server logs: Cloudflare records the requesting IP address, user agent, and the requested resource for security and abuse prevention. These logs are retained per Cloudflare's standard policy.
• Analytics: any of the following may load, only when enabled by the site operator and only if your browser does not send a Do Not Track signal. Each loads deferred so it does not block the page render:
  • Google Analytics 4, page-view and engagement metrics. The IP address visible to Google is the IP your request reaches Google's edge with.
  • Microsoft Clarity, behavioral analytics including aggregated heatmaps and session recordings. Recordings exclude form input by default. Provided by Microsoft Corporation.
  • Microsoft Bing UET (Universal Event Tracking), Bing Webmaster Tools engagement signals and, if applicable, Microsoft Ads conversion tracking.
  • Google Tag Manager, if enabled, used to deploy additional tags from the operator's GTM console.

How submissions are handled

Form submissions are delivered by email through Resend (resend.com), an email delivery service. The destination address is monitored by Hans Study only. Submissions are not added to a marketing list. There is no newsletter and no automated follow-up.

Audit results delivered by email contain a summary of the findings and the email address you provided. The original configuration text is not included in the email.

Lawful basis

The lawful basis for processing personal information collected on this Site is your consent (express, in the case of forms you choose to submit) and our legitimate interest in operating, securing, and improving the Site.

Cookies

This Site may set cookies from the following sources, only when the corresponding analytics provider is enabled by the site operator: Google Analytics 4, Microsoft Clarity, Microsoft Bing UET, Google Tag Manager, and Cloudflare Turnstile. No first-party cookies are set by TSG Labs for tracking or personalization.

If your browser sends a Do Not Track signal, the analytics providers above are not loaded and no analytics cookies are set.

Sub-processors and service providers

• Cloudflare (hosting, CDN, DDoS protection, Pages Functions, Turnstile)
• Resend (transactional email delivery for contact and audit responses)
• Google (Google Analytics 4 and, if enabled, Google Tag Manager)
• Microsoft (Clarity behavioral analytics and, if enabled, Bing UET)

Each of those services has its own privacy policy. Collectively, they may process the information described above on behalf of Hans Study, operating as TSG Labs, in order to make this Site function.

What this site does not do

• No selling, sharing, or trading of personal information.
• No advertising networks, no retargeting pixels, no third-party trackers beyond Google Tag Manager.
• No background scripts that read browser history, clipboard content, or device fingerprints.

Retention

Form submissions delivered by email are retained in the inbox of Hans Study for as long as is necessary to respond to the inquiry and maintain a record of the engagement. Audit configuration text is processed in memory only and is not retained beyond the request. Analytics data follows Google's standard retention policy. Server log data follows Cloudflare's standard retention policy.

Your rights

If you have submitted information through this Site and would like a copy of what is held, or for it to be corrected or deleted, send a request to contact@hans.study. Requests are processed within a reasonable timeframe, typically within seven days. The contact of record for privacy matters is Hans Study, Ontario, Canada.

Cross-border data transfer

The service providers listed above may process information in the United States or other countries outside Canada. By submitting information through this Site, you acknowledge that the information may be processed in those jurisdictions and may be subject to lawful access by their authorities.

Changes

This Privacy Policy may be updated. The "Last updated" date at the top of this page reflects the most recent revision.

Contact

Questions about this Privacy Policy can be sent to contact@hans.study.