Last updated 1 November 2026.
Seidr Labs is operated by a single engineer in South Africa. This page describes what the software published here accesses, and what it does not.
This website
Simply reading the public pages does not create an advertising profile: there are no advertising trackers and no third-party analytics profiles. Standard server logs may still record technical request data needed to operate and protect the site.
If you send a contact form, Seidr Labs stores the name you provide, your email address, the subject and message, a one-way hash derived from the network address, and your browser's user-agent string. The message details are used to answer the enquiry; the technical fields help prevent abuse. A notification containing the enquiry is also sent to the owner's private Telegram chat.
Seidr Beacon company accounts
When you create or sign in to a Beacon company account, Beacon stores your verified work email, company profile, short-lived verification challenges, expiring sign-in sessions and an audit trail of account actions. Verification codes expire after ten minutes. New company accounts include one active tracker; requests for additional paid tracker capacity are stored with the company account so Seidr Labs can respond. Tracker capacity is never unlocked merely by submitting a request.
Beacon's company-specific privacy notice separately explains the location, message, route and emergency data handled for enrolled phones, the company's working hours and its retention period.
Hand Control (the Windows app)
Hand Control runs on your own PC and has no account. It never sends your camera images, hand positions or gestures anywhere itself; it contacts Seidr Labs only for the update check below and, when you accept an update, to download it. A program you connect receives what you allow and may pass it on (see the last point).
- Camera. Webcam images are processed in your PC's memory to find your hands. Hand Control never uploads them and never saves them to disk. If you type a network camera's address in the Camera tab (for example a phone running DroidCam), it reads that camera's video over your network.
- Face signature. Only when you press Enrol my face on the Only me tab
does the app store one 128-number face signature (not a photo) in
%APPDATA%\Hand Control\owner_face.npy. Switching Only follow my hands off does not delete it; Forget my face does. - Files on your PC. Settings, the log, downloaded updates and, once you switch the
agent connection on or press New key, its access key are kept in
%APPDATA%\Hand Control. The log holds no images and is capped at six files of 2 MB, the oldest deleted first. The uninstaller offers to delete the whole folder. - Update check. When the app starts it fetches a small version file from seidrlabs.online (you can switch this off under About). Like any page request, the site's server log records your network address, the time, the file requested and the app version, and keeps those logs for 14 days. Updates are checked against a SHA-256 hash before they install.
- AI agents and local programs. The agent connection is off until you switch it on. It refuses web pages, and every data request needs the access key, which any program running under your Windows user can read. Agents cannot start any mouse or keyboard input. Switching control or the 3D program, and taking a camera snapshot, each need a tick. A connected program receives status, hand positions, gestures and a record of each click, key and scroll Hand Control sends (with where on the screen each click landed), plus a snapshot only if you ticked that, and may send them to its own service (an AI agent usually does). Hand Control keeps no copy of a snapshot. Unticking Allow local programs to connect shuts every program out.
Startup Deep Dive (the Windows test app)
Startup Deep Dive inspects startup registrations and related system information on your PC. The test app has no account and does not send scan results or recovery records to Seidr Labs.
- On this PC. Scan history is saved locally by default and can contain account names, paths, commands and other system details. You can pause future history in the app; existing history and recovery records remain until you remove them. Keep recovery records while you may need to restore changes. An exported report may contain sensitive details, so review it before sharing.
- Update checks. The app checks a Seidr Labs release feed when automatic checks are on,
or when you request a check. Its server can see technical request information such as your IP address;
scan and recovery data are not part of the update request. You can turn automatic checks off in the app.
If you choose to install an update, the installer is downloaded from the same host and saved locally under
%LOCALAPPDATA%\StartupDeepDive\updates; it may remain there after installation. - Web searches and support. If you choose a web search and confirm it, the selected search text is sent to the search provider in your browser. The support link opens the website contact page, whose enquiry handling is described above. Emailing us uses your own mail service.
Pip's Habitat
You can play with Pip without an account. Your creatures are then saved in your browser and, in server mode, on Seidr's server under a random cookie that identifies only that browser.
If you make a Pip account, we store your username, your email address, a scrambled (scrypt) hash of your password, the date you joined and your creatures. Sign-in sessions and password-reset links are stored only as one-way hashes. Your email is used only to send the password and username reminders you ask for, through our mail provider Resend. It is never shared for any other purpose, and there are no newsletters. Pip does not keep logs of your IP address. Rate limits hold a short, one-way hash of your network in memory for at most a day.
When Pip's voice is switched on, the words you type to your creature or read to it, together with short facts about the creature (its name, mood, the words it knows and a few memories), are sent to Anthropic's Claude to write its reply. They are not linked to your account or email.
You can delete your account at any time from the Account sheet. This erases the account and its creatures from the server immediately. The server keeps backups for 14 days, so copies in them are gone within 14 days.
NovaSync, Nova Quantum and ban appeals
This section covers the NovaSync and Nova Quantum pages on this website, their downloads and the ban-appeal form. It does not yet describe what the plugin or the mod themselves send once they run on your server or PC.
- Downloads. The plugin, the mod and the installer script are plain file downloads.
- Ban appeals. The form sends your Minecraft username, the ban reason and your message, plus the server and your email if you type them, from your browser to this website. This website passes them on to the Nova reputation service, which Seidr Labs runs and which saves them in its own database. The server and the email are saved inside the message text so the person reading the appeal can see them. It is kept so the appeal can be reviewed and answered.
- If that service cannot be reached and you gave an email, the appeal is sent through the website contact form instead and is handled as described under "This website".
- To ask what is held about an appeal or to have it removed, use the contact page.
Backup tooling and Google Drive
Seidr Labs runs internal backup tooling for its own systems. That tooling uses Google Drive as one destination among several, through the standard Google authorisation screen.
- It is authorised by the operator against the operator's own Google account. It is not offered to the public and has no other users.
- It requests the
drive.filepermission, which grants access only to the files the application itself creates. It cannot read, modify or delete the rest of a Google Drive. - The files it creates are encrypted backup archives of Seidr Labs' own systems.
- No data from Google Drive is read for any other purpose, shared with anyone, sold, or used for advertising, profiling or training.
Retention and deletion
Ban appeals sent through the NovaSync page are not deleted automatically: the Nova reputation service keeps them until they are removed by hand. Use the contact page to ask for one to be removed.
Website enquiry records are removed automatically after 12 months unless a different period is configured for a documented operational reason. Copies in pre-deployment backups and Telegram are not removed by that automated database purge and must age out or be removed separately. You can use the contact page to ask what is held about your enquiry or request deletion.
Backup archives are kept only as long as they are useful for recovery, and older copies are removed on a schedule. Authorisation can be withdrawn at any time from the operator's Google account security settings, which immediately ends the application's access.
Contact
Questions about this policy can be sent through the contact page.