Legal
Privacy Policy
01 — Data Controller
Montgomery Research Labs (“MRL,” “we,” “us,” or “our”) operates the website at montgomeryresearchlabs.com (the “Site”). We are the data controller responsible for your personal information.
For privacy inquiries, contact us at privacy@montgomeryresearchlabs.com.
02 — Information We Collect
We collect only what is necessary to operate the Site and improve it over time.
| Category | Data | When collected |
|---|---|---|
| Newsletter | Email address, name (optional) | When you subscribe via the signup form |
| Usage analytics | Page URL, referrer, browser type, screen size, country (derived from IP — not stored) | Only after analytics consent is granted |
| Consent record | Consent choices, timestamp, random consent ID | When you interact with the cookie banner |
| Technical logs | IP address, request path, status code | Automatically by our hosting provider (Netlify) |
03 — Legal Bases (GDPR Article 6)
For visitors in the European Economic Area (EEA), United Kingdom, or Switzerland, we process data under the following legal bases:
| Processing activity | Legal basis |
|---|---|
| Serving the website, security, and fraud prevention | Legitimate Interest (Art. 6(1)(f)) |
| Newsletter delivery | Consent (Art. 6(1)(a)) — withdrawable at any time |
| Analytics (Umami) | Consent (Art. 6(1)(a)) — withdrawable at any time |
| Hosting / infrastructure logs | Legitimate Interest (Art. 6(1)(f)) |
04 — How We Use Your Information
- To deliver newsletter issues and transactional emails
- To understand which tools and articles engineers find most useful (aggregate analytics only)
- To maintain the security, performance, and availability of the Site
- To comply with legal obligations
We do not sell, rent, or trade your personal data. We do not use your data for automated decision-making or profiling.
05 — Third-Party Services
| Provider | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| Netlify | Web hosting, CDN, serverless functions | Technical logs, IP | netlify.com/privacy |
| Resend | Transactional email delivery | Email address, name | resend.com/privacy |
| Sanity | Content management | None (read-only at runtime) | sanity.io/legal/privacy |
| Umami (self-hosted) | Cookieless analytics | Anonymized usage data (no PII) | umami.is/privacy |
06 — Data Retention
- Newsletter subscribers: Until you unsubscribe, then deleted within 30 days
- Analytics data: Retained for 12 months in aggregate form only
- Consent records: Stored locally on your device; no copy retained server-side
- Infrastructure logs: 30 days (Netlify default)
07 — Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data (“right to be forgotten”)
- Restriction: Ask us to limit how we process your data
- Portability: Receive your data in a machine-readable format
- Object: Object to processing based on legitimate interests
- Withdraw consent: Withdraw any consent you have given at any time, without affecting prior processing
To exercise any right, email privacy@montgomeryresearchlabs.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.
08 — Cookies & Local Storage
We store your cookie preferences in your browser's local storage under the key mrl_consent_v1. No cookies are set without your consent. See our Cookie Policy for full details.
09 — International Transfers
MRL is based in the United States. If you are located in the EEA, UK, or Switzerland, be aware that your data may be transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms with our service providers (Netlify, Resend) to protect your data.
10 — California Residents (CCPA/CPRA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of the “sale” or “sharing” of personal information.
We do not sell or share personal information as defined under California law. To exercise your rights, contact us at privacy@montgomeryresearchlabs.com.
11 — Children's Privacy
The Site is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us immediately and we will delete it.
12 — Changes to This Policy
We may update this policy from time to time. Material changes will be noted with an updated “Last updated” date at the top. Continued use of the Site after changes constitutes acceptance of the revised policy.
13 — Contact
Montgomery Research Labs
privacy@montgomeryresearchlabs.com