// Legal

Privacy Policy

Last updated: 25 October 2026

We keep data collection small and simple. This page explains what we collect, why we collect it, and the choices you have.

1. Who we are

AvelonLabs (“we”, “us”, “our”) is a software development business based in Sri Lanka. This policy applies to avelonlabs.online and any subdomains we run, including online tools and libraries we may publish there. For personal information collected through these sites, we are the controller, meaning we decide how and why it is used.

If a tool or service we add later collects extra information (for example accounts or payments), we will tell you at that point and update this policy before collecting it.

2. Information we collect

Information you give us

  • Contact form: your name, email address, the type of help you are looking for, and the project details you write.
  • Emails and calls: anything you include when you write to us or speak with us.

Please do not include sensitive information (such as health details, financial account numbers or government ID numbers) in your message. We do not need it to respond to an enquiry.

Information collected automatically

  • Server logs: IP address, browser and device type, pages requested, date and time, and the page that referred you. We use these to keep the site secure and working.
  • Spam protection: the contact form uses Google reCAPTCHA v3 to tell people from bots. It collects hardware and software information (such as device and application data) and how you interact with the page, and sends it to Google for analysis.
  • Analytics (only if you accept cookies): we use Google Analytics 4 to see which pages are viewed, how long visitors stay, which links are clicked, and the approximate location, device, browser and referral source of visits. Google states that Analytics 4 does not log or store individual IP addresses.
  • Your cookie choice: saved in your browser’s local storage so we do not ask you on every visit.

3. How we use information, and why

  • Reply to enquiries and prepare proposals. This is to take steps at your request before a contract, and it is in our legitimate interest in running our business.
  • Keep the site secure and block spam or abuse (server logs, reCAPTCHA). This is in our legitimate interests.
  • Understand how the site is used and improve it (analytics). This is based on your consent, which you can withdraw at any time.
  • Meet legal obligations, such as tax and accounting records for client work.

We do not sell your personal information, and we do not make automated decisions about you that have legal or similarly significant effects.

4. Cookies and similar technologies

When you first visit, a banner asks whether you allow analytics cookies. Nothing from Google Analytics loads unless you choose Accept. You can change your mind at any time with “Cookie settings” in the site footer.

NameProviderPurposeDuration
avelon-cookie-consent-v1AvelonLabs (local storage)Remembers your cookie choiceUntil you clear your browser data
_gaGoogle Analytics (only after you accept)Tells visitors apartUp to 2 years
_ga_*Google Analytics (only after you accept)Keeps session stateUp to 2 years
_GRECAPTCHAGoogle reCAPTCHADetects bots on the contact formUp to 6 months

Durations are Google’s defaults and may change. You can also block or delete cookies in your browser settings, or opt out of Google Analytics on all sites with Google’s browser add-on. If you block reCAPTCHA the contact form may not work; you can email us at avelonlabs.support@gmail.com instead.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. Our fonts are hosted on our own server, so loading them does not send your data to Google Fonts.

5. Who we share information with

We share only what is needed with providers that help us run the site:

  • Google: Analytics (with your consent), reCAPTCHA, and Gmail, which hosts the inbox that receives contact messages.
  • Namecheap: our hosting provider, whose server handles site traffic, server logs and form submissions.

We may also disclose information if the law requires it, to protect our rights or the safety of others, or to a successor if the business is transferred. Links to other websites are covered by their own privacy policies.

6. International transfers

We operate from Sri Lanka, and our providers may process data in other countries, including the United States. By using the site or sending us a message, you understand your information may be transferred to and processed in countries other than your own. We choose reputable providers and rely on the safeguards they offer.

7. How long we keep information

  • Contact messages and correspondence: 12 months after our last communication with you, unless the enquiry becomes a project.
  • Client project records (proposals, agreements, invoices): as long as needed to meet our contractual, legal, tax and accounting obligations.
  • Server logs: up to 90 days.
  • Analytics data: up to 14 months.
  • Cookie preference: until you clear your browser data or change it.

After these periods we delete or anonymise the information.

8. Security

We serve the site over HTTPS, restrict access to the inbox and server, and limit what we collect. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights

Depending on where you live (including under Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, and the EU or UK GDPR), you may have the right to:

  • ask for a copy of the personal information we hold about you;
  • have inaccurate information corrected;
  • have your information deleted;
  • restrict or object to certain uses;
  • receive your information in a portable format;
  • withdraw consent at any time, without affecting earlier use.

To use any of these rights, email avelonlabs.support@gmail.com. We aim to reply within 30 days and may need to verify your identity first. If you are unhappy with our response, you can complain to your local data protection authority (in the EU or UK) or to the Data Protection Authority of Sri Lanka.

10. Children

Our site and services are meant for businesses and adults. We do not knowingly collect information from anyone under 18. If you believe a child has sent us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the site grows, for example when we add new tools. The “Last updated” date above shows the latest version. If a change affects cookies, we may ask for your choice again. Please also read our Terms of Service.

12. Contact us

Questions or requests about privacy? Email avelonlabs.support@gmail.com.