What we decided
Privacy by Design is part of the lab from the beginning. This first version has no visitor accounts, advertising, analytics scripts or application cookies. Fonts use the visitor’s system; illustrations are served from this site.
What we still need
Cloudflare delivers the site and may process connection and security data. Necessary processing does not automatically require permanent storage. Our own application logging is disabled in the deployment configuration; provider-side processing is explained separately.
The future search engine
The plan is to process queries without building personal search histories. Submission forms should need a URL and crawl scope, not a name or email address. Usage counters should record totals rather than who searched for what. These are implementation goals for a search service that is not live yet.
What comes next
Check the deployed site and account settings. Privacy claims must describe what is actually delivered, including hosting behaviour. We will document meaningful changes to this design.