drylabTermsLast updated 26 October 2026
Privacy
Drylab is a research tool for simulating cells, run by Guy Gendell ("we"). This page says what we collect, why, where it is kept and how to have it deleted. Questions or requests: legal@drylab.app.
What we collect, and why
| Data | Why | Basis |
|---|---|---|
| Waitlist: your email, and if you give them, your name, lab or company, and what you would like to simulate | To send you an invite and to decide who to invite first | Your consent, given when you join; withdraw it any time |
| Account: email, name, a password hash (if you sign in with email) or your Google or GitHub account id | To sign you in and keep your work in your organisation | Our contract with you |
| Your work: experiments you run, their conditions and results, files you upload, and the compute each run used | To run your experiments and show you what they cost | Our contract with you |
| Security records: sign-ins, runs, exports and permission changes, with the account email and time | To detect misuse and keep an accurate record of usage | Our legitimate interest in running a secure service |
| Technical logs: IP address, browser and request times, kept by our hosting provider | To keep the service up and block abuse | Our legitimate interest |
We do not sell data, show ads, or use analytics or tracking. We never use your uploads to train or tune models unless you explicitly opt in for a given upload.
Cookies
The app sets one sign-in cookie (and, for a few minutes while you sign in with Google or GitHub, one more). They are needed for sign-in to work, so we do not ask for consent. The website and docs set no cookies. Fonts and scripts are served from our own domains, so loading a page sends nothing to third parties.
Who processes it for us
| Provider | What for | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting the website, docs and app; running simulations; storing results | Global network; stored data in the United States |
| Neon (Databricks, Inc.) | Database, waitlist and sign-in (Neon Auth) | United States (AWS us-east-1) |
| Google LLC, GitHub, Inc. | Only if you choose to sign in with them | United States |
If you are in the EU, EEA, UK or Switzerland, your data is transferred to the United States under the providers' data processing terms (the EU-US Data Privacy Framework where the provider is certified, otherwise the European Commission's standard contractual clauses).
How long we keep it
- Waitlist entries: until 12 months after we send your invite, or until you ask us to delete them.
- Accounts and your work: while your account exists. When you ask us to delete your account, we delete or anonymise it within 30 days.
- Security records are append-only by design and are kept for as long as the organisation they belong to exists. We keep them only for security and the integrity of usage records.
- Our host's technical logs are kept for its standard retention periods.
Your rights
You can ask to see, correct, export or delete your data, or object to how we use it. Email legal@drylab.app from the address on your account and we will reply within 30 days. If you are in the EU, EEA or UK, you can also complain to your data protection authority.
Children
Drylab is for researchers and is not meant for anyone under 16.
Changes
If this page changes in a way that matters, we will tell signed-in users and update the date above.