Privacy policy
Effective: October 13, 2026
Who we are
This website is run by Evilbeard Labs, LLC, trading as EvilBeard Labs (“we”, “us”). If you have a question about this policy or about information we hold about you, email us at hello@evilbeardlabs.com.
What this website collects
Nothing that identifies you, unless you choose to send us a brief. Specifically, this site:
- sets no cookies unless you sign in to an account, and then only the ones that keep you signed in;
- runs no analytics, tracking pixels or advertising code;
- loads nothing from anyone else’s servers — fonts, icons and images are all served from this site — with one exception, the spam check on the brief and sign-in forms, described below.
When you send us a brief
The form at /start collects what you type into it — your answers about your business and your email address — and the country your request came from. We use it to build your preview, to contact you about it, and to count how many people use the form. Specifically:
- your answers are saved in a database run by Cloudflare, and emailed to us;
- we send you one confirmation email. Our email is delivered by Resend, so both messages pass through their service;
- once you confirm your email or sign in, your answers are sent to Google’s Gemini AI. It searches the public web (Google Search) for your business and your industry — your existing website or listings, and local competitors — and from that writes a few questions for you, which appear in your account. Once you answer, it drafts a plan for your site. We use Gemini through Google’s paid API, under terms that do not allow Google to use what we send to train its models. A person at EvilBeard Labs reviews every plan before anything is built;
- while your questions are waiting, we email you a reminder once a day, a few times at most. Reply and tell us to stop, and we will;
- a summary of your brief and its plan is posted to our team’s private channel on Discord, so the person reviewing it is told it is ready;
- to stop spam, the form uses Cloudflare Turnstile, which loads a script from Cloudflare and checks signals from your browser to tell people from bots. Your IP address is used for that check and is not stored with your brief. Cloudflare describes what Turnstile processes in its Turnstile privacy addendum (opens in a new tab).
We keep a brief for as long as we are talking about the work it describes. Ask and we will delete it.
Your account
You can create an account to follow your site as we plan and build it. There are no passwords. You sign in either with Google — which tells us your email address, your name and an identifier for your Google account, and nothing else — or with a one-time code we email you. We keep your email address, your name if Google gave it to us, which briefs are yours, and when you signed in.
Signing in sets a cookie that keeps you signed in for up to 30 days, and two short-lived ones while you sign in. They are needed for the account to work, are used for nothing else, and are never shared. Sign out and the cookie is removed. The sign-in-by-email form uses the same Cloudflare spam check as the brief form. Ask and we will delete your account.
What our hosting provider sees
This site is delivered by Cloudflare. Like any web host, Cloudflare necessarily processes technical details of each request — your IP address, the page requested, your browser’s user agent — in order to deliver the page and protect the site from abuse. We do not use that information to identify visitors. Cloudflare’s handling of it is described in its privacy policy (opens in a new tab).
When you email us
If you write to us, we receive what you send: your name, your address, and whatever you tell us about your business and your project. We use it to reply, and — if we end up working together — to do the work. Our email is hosted by Google Workspace.
Preview sites
If we build you a preview of your site, it sits behind a sign-in. You enter your email address and receive a one-time code; Cloudflare, which runs that sign-in, records that the address signed in. We use this only to control who can see your preview.
What we do not do
We do not sell personal information, share it with advertisers, or use it to build profiles. We share it with the providers named on this page only so far as they need it to do their job for us.
Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it, by emailing hello@evilbeardlabs.com. We will not hold it against you, and we will answer.
Children
This site is for businesses. It is not aimed at children under 13, and we do not knowingly collect information from them.
Changes to this policy
If what we collect changes, this page changes first, and the effective date at the top moves with it.