Privacy
Privacy Policy
We collect only the information that serves a clear purpose. This page explains what we collect, why, and what we do — and don’t do — with it.
What we collect
Anonymous behavioral data. We use PostHog to understand, in aggregate, how visitors use this site — which pages and projects get attention, which paths lead to an inquiry or subscription. We do not attach form contents, email addresses, or other personal information to these events.
Subscriber information. If you subscribe to Notes from the Lab or Stories from the Field, we store your email address and publication preferences to deliver what you asked for, using Supabase (storage) and Resend (sending).
Inquiry information. If you submit the Solve a Problem form, we store what you tell us — your contact details and the problem, context, or opportunity you describe — to understand and respond to it. This is stored in Supabase and is not sent to our analytics tool.
What we don't do
We don’t sell your information. We don’t send private form content, email addresses, or other sensitive information to analytics. We don’t include restricted or participant-sensitive information — such as field research involving identifiable individuals — in general analytics or public content without separate, specific consent.
Cookies and similar technology
PostHog uses cookies and browser storage to distinguish visitors and understand aggregate behavior. You can decline non-essential cookies where a consent choice is presented, and most browsers let you block cookies entirely, though some parts of the site may work less well as a result.
Your choices
You can unsubscribe from our publications at any time using the link in any email we send. To request access to, correction of, or deletion of information we hold about you, contact us using the details below — we handle these requests manually and will respond as quickly as we can.
Where your information is stored
We use Supabase for structured data (subscribers, inquiries), Resend for sending email, PostHog for analytics, and Vercel for hosting. Each of these providers processes data on our behalf under its own security practices.
Children
This site is not directed at children, and we don’t knowingly collect personal information from children.
Changes to this policy
We may update this policy as the site and our practices evolve. We’ll update the date below when we do.
Contact
Questions about this policy or your information: privacy@tomorrowlabs.org
Last updated August 7, 2026.