Privacy Policy

Last updated: December 13, 2025

1. Introduction

At GenMediaLab ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website genmedialab.com (the "Site").

This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

GenMediaLab is the data controller responsible for your personal data. For any privacy-related questions, you can contact us through our contact page.

3. Information We Collect

3.1 Analytics Data

Cloudflare Web Analytics (Always Active)

We use Cloudflare Web Analytics, a privacy-first analytics service that does NOT use cookies or track individual users across websites. Cloudflare collects:

  • Page views and visit counts
  • Referrer information (which site you came from)
  • Browser type and device information (anonymized)
  • Country-level geographic data (not precise location)

Important: Cloudflare Web Analytics is GDPR-compliant, cookieless, and does not collect personal identifiers. No consent is required. For more information, see Cloudflare's privacy policy.

Google Analytics (Requires Consent)

With your consent, we use Google Analytics 4 to understand how visitors interact with our website. Google Analytics collects:

  • Pages visited and time spent on each page
  • Click events on navigation, buttons, and links
  • Article views and content interactions
  • Device and browser information
  • Geographic location (country/region level)
  • Traffic sources and referrers

Your Choice: Google Analytics is only activated if you give consent through our cookie consent popup. You can change your preferences at any time by clicking the cookie settings button in the bottom-left corner of the page.

For more information, see Google's Privacy Policy and Google Analytics data practices.

3.2 Contact Form Data

If you submit a contact form, we collect:

  • Your name
  • Email address
  • Message content
  • Timestamp of submission

This data is used solely to respond to your inquiry and is not shared with third parties unless required by law.

3.3 Affiliate Links

We participate in affiliate programs for AI tools and services. When you click an affiliate link, you may be redirected through our /go/ redirect handler before reaching the affiliate site. We do not track individual clicks beyond aggregate statistics.

Affiliate partners (e.g., Synthesia, HeyGen, Pictory) may set their own cookies when you visit their sites. Please review their privacy policies for details.

3.4 Automatically Collected Data

Our web server (Vercel) automatically logs:

  • IP addresses (anonymized)
  • HTTP request metadata (headers, timestamps)
  • Error logs for debugging

This data is retained for security, performance monitoring, and legal compliance purposes.

4. How We Use Your Information

We use collected data for the following purposes:

  • Site Analytics: Understand traffic patterns and improve content
  • Communication: Respond to inquiries submitted via contact forms
  • Security: Prevent abuse, spam, and malicious activity
  • Legal Compliance: Meet legal obligations and enforce our terms

We do NOT sell, rent, or share your personal data with third parties for marketing purposes.

5. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

  • Legitimate Interests: Analytics and site improvement (Article 6(1)(f))
  • Contract Performance: Responding to contact form inquiries (Article 6(1)(b))
  • Legal Obligations: Complying with laws and regulations (Article 6(1)(c))

6. Data Retention

  • Analytics Data: Retained by Cloudflare for up to 6 months
  • Contact Form Data: Retained for 2 years or until resolved
  • Server Logs: Retained for 30 days for security purposes

7. Your Rights (GDPR)

Under GDPR, you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests

To exercise these rights, contact us via our contact page. We will respond within 30 days.

8. Cookies and Tracking

8.1 Our Cookie Consent System

When you first visit our website, you'll see a cookie consent popup that allows you to choose your preferences:

  • Accept All: Enables all cookies including Google Analytics tracking
  • Essential Only: Only uses essential cookies required for the site to function
  • Reject All: Disables all non-essential cookies and tracking
  • Customize: Choose exactly which types of cookies to allow

Your preferences are stored locally in your browser and remembered for up to 365 days. You can change your preferences at any time by clicking the cookie settings button (⚙️) in the bottom-left corner of the page.

8.2 Types of Cookies

Essential Cookies

These cookies are necessary for the website to function and cannot be disabled. They include:

  • Theme preference (light/dark mode)
  • Cookie consent preferences
  • Session management

Analytics Cookies (Optional)

If you consent to analytics, Google Analytics may set the following cookies:

  • _ga: Distinguishes unique users (expires: 2 years)
  • _ga_*: Maintains session state (expires: 2 years)
  • _gid: Distinguishes users (expires: 24 hours)
  • _gat: Throttles request rate (expires: 1 minute)

Location Services (Optional)

If you consent to location services, we may use your geographic location to automatically suggest the most appropriate language for you. This data is not stored permanently.

8.3 Third-Party Cookies

Some third-party services (like embedded YouTube videos or affiliate partners) may set their own cookies when you interact with their content. We have no control over these cookies.

You can also control all cookies through your browser settings. Most browsers allow you to:

  • Block all cookies
  • Allow only first-party cookies
  • Delete cookies after each session

9. Third-Party Links

Our Site contains links to third-party websites (e.g., affiliate partners, tool vendors). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing personal information.

10. Children's Privacy

Our Site is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

11. Data Security

We implement industry-standard security measures to protect your data, including:

  • HTTPS encryption (TLS 1.3)
  • Strict Transport Security (HSTS)
  • Content Security Policy (CSP) headers
  • Rate limiting to prevent abuse
  • Regular security audits

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

12. International Data Transfers

Our hosting provider (Vercel) and analytics provider (Cloudflare) operate globally. Your data may be processed in the United States or other countries. These providers comply with GDPR through Standard Contractual Clauses (SCCs) and other safeguards.

13. Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top indicates the latest revision. We encourage you to review this policy periodically.

14. Contact Us

If you have questions about this privacy policy or wish to exercise your rights, please contact us:

15. Supervisory Authority

If you are located in the European Economic Area (EEA) and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.