Privacy Policy

Last updated: June 23, 2026

This policy covers the Holdout Lab website (holdoutlab.com). It's short because we collect very little.

The app is self-hosted — it sends us nothing

Holdout Lab, the application, runs entirely on your own machine. Your API keys, market data, strategies, and trades stay there. They are never transmitted to us. This page is only about the marketing/docs website you're reading now.

What we collect

• Your email — only if you submit it in the "Notify me about Pro" form. It's stored in a first-party database on our hosting provider (Cloudflare D1) and used for one thing: to email you about the Pro edition's availability and pricing.
• Aggregate analytics — we use Cloudflare Web Analytics, which is cookieless: it reports anonymous, aggregate traffic (page views, referrers) and does not set cookies, fingerprint you, or track you across other sites.
• Standard server logs — like any website, our host briefly processes request metadata (e.g., IP address) to serve pages and protect against abuse.

What we don't do

• No cookies for tracking, no advertising trackers, no third-party analytics scripts.
• We never sell, rent, or share your email with anyone.

Who processes the data

Our hosting and analytics run on Cloudflare (hosting, the waitlist database, and Web Analytics), acting as our infrastructure provider. See Cloudflare's privacy policy.

How long we keep it

We keep your email until we've sent the notification you signed up for or until you ask us to remove it — whichever comes first.

Your choices

You can ask us to access or delete the email we hold for you at any time — just email support@holdoutlab.com and we'll take care of it.

Children

This website isn't directed at, and we don't knowingly collect data from, anyone under 16.

Changes

If this policy changes, we'll update this page and the "Last updated" date above. Questions? Email support@holdoutlab.com.