Last updated: 16 October 2026
This policy explains what personal data Mountain Labs collects, why, who we share it with, and the rights you have over it.
Who we are. Mountain Labs Ltd ("Mountain Labs", "we") is a company registered in England and Wales, company number 16890919, at 128 City Road, London, EC1V 2NX. We are the data controller for the personal data described here.
Contact. For anything about your data, email privacy@mountain-labs.io.
- Data about you, our customer, such as your account, billing and how you use our website. We decide how this is used, so this policy covers it.
- Content you store in Mountain Labs, including any personal data about your own users or readers. You decide what goes in it and how it is used. For this content you are the controller and we are your processor: we handle it only to provide the service, under our Terms of Service. If you need a data processing agreement, email us.
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Name, email address, password (stored hashed, never in plain text) | You, when you sign up |
| Billing details | Billing name, address, plan, payment history. Card details go straight to Stripe; we never see them | You, at checkout |
| Usage and analytics | Pages viewed, clicks and actions in the site and console, browser and device type, approximate location from your IP address. This may include recordings of how pages are used | Our website and console, through cookies and similar technology |
| Performance and error data | Page load times, errors, technical logs | Our website and console |
| Messages | Emails you send us, and emails we send you (for example password resets) | You, and us |
We remove passwords, access tokens and similar secrets from web addresses before any analytics or monitoring data leaves your browser.
| Purpose | Legal basis |
|---|---|
| Creating and running your account, and providing the service you signed up for | Performing our contract with you |
| Taking payments and keeping financial records | Contract, and our legal obligations (tax and accounting) |
| Sending service emails, such as password resets and important changes | Contract |
| Keeping the service secure and finding and fixing errors | Our legitimate interest in a reliable, secure service |
| Understanding how the site and product are used, to improve them | Our legitimate interest in improving the product, or your consent where the law requires it |
We do not sell your personal data, and we do not use it for advertising.
- Account and content: while your account is open, then deleted within 30 days of it closing.
- Billing records: 6 years, because UK tax law requires it.
- Analytics, performance and error data: only as long as it is useful, typically no more than 12 months.
- Emails with us: as long as needed to deal with your request, and then up to 2 years.
| Cookie | What for | Type |
|---|---|---|
| Sign-in cookies | Keep you signed in to the console | Essential |
PostHog (ph_*) | Product analytics | Analytics |
Datadog (_dd_s) | Performance monitoring | Analytics |
Essential cookies are needed for the service to work. You can block or delete analytics cookies in your browser settings without affecting the service.
Under UK data protection law you can ask us to:
- give you a copy of your personal data;
- correct it;
- delete it;
- restrict or object to how we use it, including for analytics;
- give it to you, or to another service, in a portable format.
Email privacy@mountain-labs.io. We will reply within one month. You can read and export your content at any time through the API.
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.
We protect your data with encryption in transit, access controls, and by limiting who can see it. No system is perfectly secure; if a breach affects your data, we will tell you and the ICO as the law requires.
Mountain Labs is not intended for anyone under 18, and we do not knowingly collect their data.
We will update this policy when what we do with data changes. For significant changes, we will email account holders before they take effect.