Privacy

Last updated 23 October 2026

Catalyst Design Lab LLC ("we") runs this site. It collects as little as it can: what you choose to tell us in the Start a project form, and anonymous counts of how the site is used.

Questions, or a request about your data: write to hello@catalystdlab.com.

What we collect

The Start a project form: what you need, a description and a link if you add them, your timeline and budget, your name, email and company, and which button opened the form.

While you fill it in, your draft is kept in your browser's session storage, so a reload doesn't lose it. It's cleared when you send the brief or close the tab, and it never reaches us unless you send it.

Once you've sent a brief, your browser keeps a short summary of it (what you need, your timeline and budget, your name and email) for 7 days, so the form shows it's been sent instead of starting over. It stays on your device.

Anonymous usage counts through Vercel Web Analytics: pages viewed, the kind of device and the country, and the form's steps (opened, sent, and the choices picked, never your name or email). It sets no cookies; visitors are told apart by a hash that resets every 24 hours.

Our host, Vercel, handles your IP address to serve the pages and keep the site safe. The form also uses it, in memory only, to stop more than a few briefs from one address in ten minutes.

What we don't do

No cookies, no ads, no tracking across other sites, and no session recording: nothing records your clicks, scrolling or typing. Our fonts are served from our own domain, so loading a page doesn't send your address to Google or anyone else.

We don't sell or share your details, and we only email you about your brief. There's no newsletter; if we ever start one, we'll ask first and every issue will have an unsubscribe link.

Why, and who helps

We use your brief to reply to you and prepare a quote, a step you asked us to take before any contract. The usage counts and security checks are in our legitimate interest in running a working, safe site.

A brief reaches us through Resend, which delivers the email (from its servers in Ireland), into our Microsoft 365 mailbox. Vercel hosts the site and the analytics. Some of these companies are based in the United States and may handle data there, under safeguards such as the EU's Standard Contractual Clauses.

How long we keep it

As long as we're talking about the project. If we don't go on to work together, we delete your brief within 12 months. If we do, it becomes part of the project's records.

Your rights

Wherever you live, you can ask us what we hold about you, to correct it, to delete it, or to stop using it, and get a copy to take elsewhere. Write to us and we'll reply within a month.

If you're in the EU, the UK or another place with data protection law, you can also complain to your local data protection authority.

Children

This site is for businesses and isn't meant for anyone under 16. We don't knowingly collect children's details; if you think a child has sent us a brief, write to us and we'll delete it.

Changes

If what the site collects changes, this page changes with it, and the date at the top moves.