How Porthoslab processes and protects personal data.
This Privacy Policy explains how Porthos Lab Limited, trading as Porthoslab (“Porthoslab”, “we”, “us”, or “our”), processes personal data when you visit https://porthoslab.com/, use https://quiz.porthoslab.com/, contact us, or otherwise interact with us (together, the “Services”).
This Privacy Policy should be read together with our Cookie Policy at /cookie-policy/.
The controller responsible for personal data processed through the Services is:
Porthos Lab Limited
Company Number: 819718
Venture Hub
136 Capel Street
Dublin 1, D01 T2C9
Ireland
Email: hello@porthoslab.com
The Services currently have a limited technical and data-processing footprint.
When you visit the Services, Netlify may process technical information required to deliver and secure the Websites. This may include:
We use Netlify to host and deliver the Websites. This information is processed to operate, secure, maintain, and diagnose the Services.
The Services use Google Fonts to display selected web fonts. When your browser loads these fonts, Google may receive your IP address, browser or device information, and ordinary technical request metadata.
During testing on August 30, 2026, no cookie or browser storage access by Google Fonts was observed. However, the font request itself involves a connection between your browser and Google's font-serving infrastructure.
The quiz website (quiz.porthoslab.com) uses Supabase to retrieve published quiz scenarios and related content, and to operate an account and sign-in system for its 12-question learning challenge. Where you choose to create a quiz account or sign in, we process:
We use this information to authenticate you and maintain your session; let you start, continue, and resume a quiz run; operate the 12-question learning challenge; determine whether a completed quiz run meets the programme's published participation conditions; prevent duplicate or manipulated reward eligibility and other misuse of the programme; provide support and resolve technical issues; and meet applicable fraud-prevention, security, legal, regulatory, record-keeping, and dispute-handling obligations where necessary.
Where available, a qualifying completed quiz run may create a claimable PORTH participation reward, subject to eligibility and programme rules. Not every quiz run results in a reward, and completing a quiz run does not guarantee one. A claimable participation reward is not a payment, a price, an investment, or a return, and does not represent a guaranteed monetary or token value. Wallet addresses are not collected by this quiz flow at this stage. Connecting a wallet or an on-chain token transfer is not currently part of this feature.
If you email us at hello@porthoslab.com, we will process the information you include in your message, such as your name, email address, message content, and any information necessary to respond to you.
The main Website (porthoslab.com) does not currently operate:
The quiz website (quiz.porthoslab.com) operates the account, sign-in, and quiz-run features described above. It does not currently operate a wallet-connect feature or an on-chain token transfer or payment flow.
We use the personal data described above to:
We do not currently use personal data for behavioural advertising, targeted advertising, advertising audiences, marketing pixels, or website analytics.
Where the GDPR, UK GDPR, or similar law applies, we process personal data only when a valid legal basis applies.
| Processing activity | Legal basis |
|---|---|
| Hosting, delivery, security, technical logs, and fraud prevention | Legitimate interests in operating, securing, and protecting the Services |
| Responding to an email or request you send us | Legitimate interests in responding to enquiries; contract where necessary to take steps at your request |
| Retaining records for legal, accounting, regulatory, security, or dispute purposes | Legal obligation and/or legitimate interests in protecting our rights |
| Optional cookies or analytics, if added later | Consent where required by law |
Our legitimate interests include operating a reliable and secure Website, protecting the Services against misuse, responding to users, and complying with our legal and operational responsibilities. We balance these interests against your rights and freedoms.
We may share or make personal data available to service providers that support the Services:
| Provider | Service | Data involved |
|---|---|---|
| Netlify | Website hosting, content delivery, security, and technical infrastructure | Website request, IP, browser/device, security, connection, and technical-log data |
| Google Fonts | IP address, browser/device information, and normal font-request metadata | |
| Supabase | Backend functions for quiz.porthoslab.com, including quiz-content delivery, authentication, session handling, and quiz-run and reward-eligibility records | Email address, authentication/session data, optional nickname, quiz-run and answer data, and reward-eligibility data |
We may also disclose personal data to professional advisers, regulators, authorities, courts, law-enforcement bodies, insurers, or other parties where required by law or reasonably necessary to protect rights, safety, security, property, or the integrity of the Services.
We may disclose information as part of a merger, acquisition, financing, reorganisation, sale of assets, or other corporate transaction, subject to appropriate safeguards.
We do not sell personal data.
Some service providers may process personal data outside Ireland, the European Economic Area, or the United Kingdom.
Where a transfer of personal data is subject to GDPR or UK GDPR transfer rules, we will use a legally recognised transfer mechanism where required. This may include an adequacy decision, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement, the UK Addendum to the Standard Contractual Clauses, or another lawful safeguard.
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
| Data type | Retention approach |
|---|---|
| Website hosting, security, and technical logs | Retained according to operational and security needs and the applicable provider configuration; normally no longer than reasonably necessary for security, diagnostics, and legal obligations |
| Emails and correspondence | Up to 24 months after the last meaningful interaction, unless a longer period is needed for a legal obligation, security matter, dispute, or legal claim |
| Quiz-content requests | Retained only as necessary for technical operation and security |
| Quiz account, session, and quiz-run records | Retained while your quiz account is active, and for up to 24 months after your last account or quiz activity, unless a longer period is needed for a legal obligation, security matter, dispute, or legal claim |
| Reward-eligibility and related audit records | Retained while a reward remains claimable under the applicable programme rules. Where necessary, we retain minimal reward-eligibility and audit information for up to 5 years to prevent fraud or duplicate-reward misuse, resolve disputes, or meet legal obligations |
| Legal, fraud, abuse, security, and dispute records | For as long as reasonably necessary to investigate, resolve, comply with law, or establish, exercise, or defend legal claims |
We may delete, anonymise, or aggregate information when it is no longer needed.
Depending on applicable law and your location, you may have the right to:
To exercise a right, email hello@porthoslab.com. We may ask for information to verify your identity before responding. We will respond within the timeframe required by applicable law.
If you are in the European Economic Area, you may complain to the supervisory authority in your country of habitual residence, place of work, or place of the alleged infringement. You may also contact the Irish Data Protection Commission.
If you are in the United Kingdom, you may complain to the Information Commissioner's Office.
We do not currently make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
We use reasonable technical and organisational measures designed to protect the Services and personal data against unauthorised access, misuse, loss, alteration, and disclosure.
No online system can be guaranteed completely secure. You should take appropriate steps to protect your device, browser, and email account.
The Services are not directed to children under 16. We do not knowingly collect personal data from children under 16 without authorisation from a parent or legal guardian where required by applicable law.
If you believe a child has provided personal data to us without the required authorisation, email hello@porthoslab.com so that we can review the matter and take appropriate action.
The Services may link to third-party websites, social platforms, wallets, blockchains, exchanges, payment services, or other external services. Those third parties operate under their own terms and privacy policies.
Porthoslab is not responsible for the privacy practices of third parties. Please review their privacy information before using their services, connecting a wallet, or providing personal data.
We may update this Privacy Policy to reflect changes to the Services, our data practices, or applicable law. We will post the updated version on this page and revise the “Last updated” date.
If we make a material change, we will provide additional notice or obtain consent where required by law.
If you have questions about this Privacy Policy, our processing of personal data, or your privacy rights, contact:
Porthos Lab Limited
Company Number: 819718
Venture Hub
136 Capel Street
Dublin 1, D01 T2C9
Ireland
Email: hello@porthoslab.com