L1 Legal
Privacy note
Last updated 31 July 2026
This is a short document because there is very little to describe. This website is a set of static files. It runs no advertising trackers, no session recording, no cross-site tracking and no marketing scripts. It sets no cookies.
Analytics
We use Cloudflare Web Analytics to see which pages are read and how quickly they load. We chose it specifically because of what it does not do:
- It sets no cookies and stores nothing on your device.
- It creates no persistent or cross-site identifier, so it cannot follow you between visits or between websites.
- It does not fingerprint your browser.
- The data is not shared with an advertising network, because there isn't one involved.
What it records for each page view: the page address, the referring address if you arrived from a link, approximate location at country level, browser and device type, and page-load timings taken from your browser's standard performance API. We use it in aggregate to decide what to write and what to fix. If you block it — most content blockers do, and so does a strict browser setting — the site works identically.
The beacon script is served by Cloudflare from static.cloudflareinsights.com and is
the only third-party script on the site. Fonts, images, styles and every other asset are served
from this domain.
What we collect from you directly
Only what you send us. If you use the brief form or email us directly, we receive the information you chose to include — typically your name, email address, organisation and a description of your problem.
Our hosting provider produces standard server logs, which may include IP addresses and user-agent strings, retained for a short period for security and operational purposes. We do not use those logs to build profiles.
What we do with it
- Reply to you, and continue the conversation you started.
- Keep a record of the enquiry so we have context if you come back later.
We do not add you to a mailing list, we do not run automated nurture sequences, and we do not sell, rent or share your information with third parties for their own purposes.
Where it lives
Enquiry correspondence is held in our business email and, where relevant, a simple internal record. If the brief form is configured to use a third-party form provider, your submission passes through that provider before reaching us; the provider processes it on our instructions only.
How long we keep it
Enquiry correspondence is retained for up to 24 months from our last exchange, then deleted, unless it forms part of a contract or we have a legal reason to keep it longer.
Client data during engagements
Where an engagement requires us to process your data — production data, telemetry, documents — it is governed by the engagement contract and, where applicable, a data processing agreement. In that context we act as a processor on your instructions. Our standing preferences are: work in your environment where possible, minimise copies, use synthetic or anonymised data for development, and delete working copies at the end of the engagement.
Your rights
You can ask us what we hold about you, ask for it to be corrected, or ask us to delete it. Write to [email protected] and we will action it, normally within 30 days.
Changes
If this note changes materially, the updated date above changes with it. There is no version history worth publishing yet.
Contact
Bluestreak Labs, Pune, Maharashtra, India · [email protected]