Privacy policy

Egan Lab is operated by Colin Egan. This page explains what information we collect through this website and the client portal, why we collect it, and how you can control it. If anything here is unclear, email colinthomasegan5@gmail.com.

Information we collect

Contact form. When you fill out the contact form, we collect your name, email address, project type, budget range, and whatever you write in the message field. We use it only to respond to your inquiry and put together a proposal.

Newsletter. If you subscribe from the footer, we collect your email address to send occasional updates. You can unsubscribe at any time.

Client portal.If you're a client with portal access, we store your business name, a password (as a one-way bcrypt hash — we never store or see your actual password), and the project details, images, and files associated with your account.

Cookies

This site sets one cookie: portal_session, used only to keep client portal users signed in for up to seven days. It's first-party, marked httpOnly, and isn't used for tracking or advertising. We don't run analytics or third-party ad trackers on this site.

How we use your information

We use the information above to respond to inquiries, deliver the services you've hired us for, and operate the client portal. We don't sell your information. We don't share it with third parties except the infrastructure providers that help us run this site and the portal — currently Supabase for data storage and Vercel for hosting — who process it on our behalf and don't use it for their own purposes.

Security

Portal passwords are hashed with bcrypt before storage — the plain-text password is never saved. Portal data is served only through authenticated server requests using credentials that never reach your browser. Traffic to this site is encrypted with HTTPS.

Your choices

You can ask us to access, correct, or delete the information we hold about you at any time by emailing colinthomasegan5@gmail.com. We'll respond within a reasonable time.

Children

This site isn't directed at children, and we don't knowingly collect information from anyone under 13.

Changes to this policy

If this policy changes, we'll update the date at the top of this page. Continued use of the site after a change means you accept the update.