Privacy policy

Last updated: 23 October 2026

This policy explains what personal data the Magenta Labs website (magentalabs.is) processes, why, and what rights you have.

Who is responsible

The controller is Magenta Labs, Kennitala 5610261490, Iceland. You can contact us about privacy at [email protected].

Contact form

When you send a message through the contact page, we receive your name, your email address, your phone number (optional), your message and the language selected on the site. The message is emailed to us through the form service Web3Forms (api.web3forms.com), which delivers it to our inbox. A copy is also stored in our hosting storage on Cloudflare together with the date and time, the site address it was sent from, your browser’s user agent and whether the email was delivered. We use this data only to read and answer your enquiry. The legal basis is our legitimate interest in replying to messages you send us, or steps you ask us to take before entering into a contract.

Hosting and technical data

The website is hosted on Cloudflare Pages. As with any website, your browser sends technical data such as your IP address and browser details to Cloudflare when you visit, so that the pages can be delivered and protected. The home page asks Cloudflare which country you are visiting from, so that it can show content suited to visitors in Iceland. Only the result (Iceland or another country) is kept in your browser.

Fonts

The site loads its fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When the fonts load, your browser connects to Google, which receives your IP address and browser details.

Cookies and browser storage

The website does not set cookies of its own and does not use analytics or advertising trackers. It stores two small values in your browser’s local storage: your language choice (English or Icelandic) and the country result described above. These are needed for the site to work as you expect and are never sent to us. You can remove them at any time by clearing your browser’s site data.

Partner log in

The partner log in page does not send the username or password you type anywhere. The password field is cleared as soon as the form is submitted.

Sharing and retention

We do not sell your personal data. It is shared only with the service providers named above, Cloudflare, Web3Forms and Google, to the extent needed to run the website and deliver your messages. Some of these providers may process data outside the European Economic Area. Contact form messages are kept for 12 months and then deleted, or earlier if you ask us to delete them.

Your rights

Under the General Data Protection Regulation (GDPR) and the Icelandic Act no. 90/2018 on Data Protection and the Processing of Personal Data, you have the right to access the personal data we hold about you, to have it corrected, to have it deleted and to object to its processing. To use these rights, write to [email protected].

You also have the right to lodge a complaint with the Icelandic Data Protection Authority, Persónuvernd, www.personuvernd.is.

Changes

We may update this policy when the website changes. The date at the top shows when it was last updated.