← Back to GenXYZ Lab

Website privacy

Effective 29 August 2026

This page describes data handled by the GenXYZ Lab landing page. It does not replace the privacy information shipped with the application itself.

Anonymous community identity

Firebase Anonymous Authentication creates a random account identifier in your browser so reactions can be toggled and writes can be protected by database rules. GenXYZ Lab does not ask for a social login on this page.

Public comments and reactions

Your chosen display name and comment are public. Public comment records do not contain your Firebase author identifier. Reaction membership is stored under random anonymous Firebase identifiers so each account can manage its own vote. Those pseudonymous keys are technically readable with the public reaction data, although the interface displays only totals.

Bug reports

Bug reports are not shown in the public feed. They can be read at their exact database path by the submitting anonymous account and by site administrators. A name, contact method, and device are optional; the description, category, app version, creation time, and report status are stored. Never include passwords, API keys, private source code, or other secrets.

Download counter

The site attempts to increment a global counter after you confirm a download, plus a second counter for the platform you chose (Android or Windows). Both are plain totals; neither is linked to your anonymous identifier, and no device fingerprint is stored. They measure recorded link clicks, not completed downloads or installations. Cloudflare may separately process normal request logs when serving the site, and Google processes the release-file request.

To render the public download globe, Cloudflare provides the download request's approximate latitude and longitude to a same-origin function. The function immediately rounds each coordinate to the nearest 5 degrees (a cell hundreds of kilometres across). Firebase stores only that coarse coordinate cell and its aggregate download count. The map record does not include an IP address, precise location, timestamp, device identifier, or Firebase account identifier.

Your browser's reported platform is read once in your own browser so the download button can lead with the build you most likely want. That reading is never transmitted or stored.

Local storage and retention

The display name convenience field and Firebase anonymous session may persist in your browser. You can clear site data in browser settings. Public comments remain until moderated. Bug reports are retained while they are being reviewed and are deleted by the operator when no longer needed; the client does not perform automated retention.

Service providers and requests

Firebase processes authentication and database data; Cloudflare hosts the page and processes coarse location at the edge; GitHub hosts the public release files. To request correction or deletion, submit a bug report with category Other, include a way to contact you, and identify the relevant content. Because comments do not expose an owner ID, enough detail is needed to locate the item.