Privacy
What this site knows about you.
Nothing, unless you agree to be measured — and the pages work exactly the same either way. The detail is below, and it is short because the site is.
Who runs it
MASLI operates maslilabs.com. For anything on this page, including a request to see, correct or delete what we hold about you, write to info@maslilabs.com. A person reads that mailbox.
What the site collects by itself
Nothing. There is no form on this site, no account, no login, no comment
box and no newsletter. The security policy the server sends with every
page sets form-action 'none', so a form could not submit
anywhere even if one appeared by accident. Reading a page leaves no record
with us.
Where your browser is allowed to go
Every page carries a Content-Security-Policy header that names every destination your browser may contact. Beyond this domain, the entire list is googletagmanager.com and google-analytics.com.
There is nothing else to block: no embedded map, no video player, no chat widget, no font service — the typefaces are served from this domain. Adding a destination means editing that header in the site's source, which is the same change that would bring it onto this page.
Measurement, and the choice you were offered
Until you accept, Google Tag Manager is not loaded. Not loaded with its signals set to "denied" — not loaded at all, so no request leaves your browser for Google. You can check that: open your browser's network panel and look before you click anything.
If you accept, the container loads and with it Google Analytics 4. That sets cookies in your browser and sends Google a record of which pages you opened, an approximation of where you are derived from your IP address, and what kind of device and browser you used. We use it to see which writing gets read. The lawful basis is your consent, under Article 6(1)(a) of the GDPR and the ePrivacy rules on storing things on your device.
Taking it back is as easy as giving it, and it takes effect immediately:
What is stored on your device
One entry in your browser's local storage, masli.consent.v1,
holding the word granted or denied. It is how the
banner knows not to ask twice. It is not a cookie, it is never sent to us,
and it stays until you clear the site's data. If you decline, that entry is
the only thing this site stores anywhere.
Hosting, and where data goes
The site is served by Cloudflare Pages. Like any web server, Cloudflare processes the requests it answers — your IP address, the page you asked for, your browser's user agent — because delivering a page requires knowing where to send it.
If you accept analytics, the data goes to Google and is processed in the United States. Google states that it relies on the EU–US Data Privacy Framework and on standard contractual clauses for those transfers.
If you write to us, we keep the correspondence for as long as it takes to deal with it and to meet our record-keeping obligations. We do not add you to a mailing list; there is no mailing list.
Your rights
You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict or object to how it is used, and to receive it in a portable form. Where we rely on your consent you can withdraw it at any time, including with the buttons above, and withdrawing it does not affect what happened before.
Write to info@maslilabs.com and we will answer within a month. If you are not satisfied, you can complain to the data protection authority of the country you live in.
Changes
This page changes when the site does — a new destination in that header, or a new tag in the container, means a new paragraph here. It is not updated on a schedule, because a policy that says the same thing on a new date tells you nothing.