DuelLab Privacy Notice

Operator and controller contact

Gábor Eifert operates DuelLab as an independent project based in Budapest, Hungary, and is the controller for the processing described in this notice. Contact contact@duellab.org.

A company is being formed to become the future operator and controller; its registration and final legal name are still in progress. Until this notice is updated after responsibility is formally transferred, Gábor Eifert remains the operator and controller.

Information we collect

We may collect or receive the following categories of information:

• Technical request data such as IP address, browser or device metadata, requested URL, referrer, and access time.
• Messages and related contact details you send to contact@duellab.org.
• Operational and security information processed by infrastructure providers that deliver or protect the sites.

Purposes and legal bases

Technical request, delivery, and security data are processed on the basis of legitimate interests under Article 6(1)(f) GDPR: operating and securing the public sites, preventing abuse, and diagnosing delivery or availability problems. DuelLab limits this processing to information reasonably necessary for those purposes.

Correspondence is processed on the same legitimate-interests basis to read, respond to, and keep a proportionate record of inquiries. If a message asks DuelLab to take steps before entering an agreement, or information must be retained to meet a legal obligation, Article 6(1)(b) or 6(1)(c) GDPR applies to that specific processing. DuelLab does not use public-site data for advertising or automated decisions about visitors.

How we use information

• Operate, maintain, and secure the sites.
• Diagnose availability, delivery, or abuse issues.
• Respond to inquiries, corrections, and collaboration requests.
• Improve public materials and understand broad site usage patterns.

Third-party services

Cloudflare provides hosting, content delivery, and security services and may process technical request and security-log information. Cloudflare may process information outside the EEA; its data-processing terms provide transfer safeguards including the EU–US Data Privacy Framework and, where applicable, Standard Contractual Clauses.

Proton AG, based in Switzerland, provides email services and may process contact details, message metadata, and message content needed to deliver and store correspondence. The sites serve fonts and benchmark chart code from same-origin static assets. Public pages may also link to third-party services such as Discord or X; visiting those services is governed by their own terms and privacy practices.

Cookies and tracking

DuelLab does not currently intentionally install analytics or advertising trackers on these public sites. Hosting, CDN, or security providers may still use technical cookies, logs, or similar mechanisms needed to deliver and protect the sites.

The benchmark stores theme choice and selected comparison models in localStorage. These functional preferences stay in the browser and are not analytics identifiers.

Retention

Edge delivery and security logs follow the configured hosting-provider retention settings. DuelLab does not use them to build visitor profiles. Information copied for a specific security or delivery investigation is kept only while needed for that investigation and related legal obligations. Correspondence is retained while a request is active and afterward only as needed for security, correction history, dispute handling, or legal obligations.

Your rights

Depending on the processing and applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. Send requests to contact@duellab.org. You may also complain to a competent supervisory authority.

Questions

For privacy questions or requests, contact contact@duellab.org.

Changes

DuelLab may update this notice as the public sites and supporting infrastructure evolve.